<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9076">
<package pkgid="754bf064dd5f9967e53cbad2b81d1c17483256c2c6cb12e0c4e0b1768960cfc9" name="389-ds-base" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="e9092ffbd62eee7407a3165d5d3bbad9bd9136605e84177bfc715c59557ab3c9" name="389-ds-base" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="1df08e96b5b776bc1513f006b904196e0ff680e0647d2e75c870782ed3365d8e" name="389-ds-base" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="b4f4b2a83868ad417e9b718f5a3946b0e4dc61226680fbfdd1c0bd182fd2aebe" name="389-ds-base" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="ab87ca19e7fa59f5ae9a10da4140e69ac7a485135cf88a27200cd23c9d4c27ef" name="389-ds-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="3f17221b0c00a361cc39d7fbde4eb6f7b2ffe4888b29579bf54f02b72008d3b4" name="389-ds-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="03c486821139a64f6adab023cb746710d527604b3c6ad70f89f698734bf8a85c" name="389-ds-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="c80041cbe538612befadc435b56dc894eb2045d37637d6f0ea6e842407431471" name="389-ds-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="426e70ce1a62f8582e38e5f8dcd5601fe28220ef8461cab9372c2a1f55aa2b68" name="389-ds-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="e870e3ae90c77e8d453131d9acfc2d85dbc1d3e2cef6dc37093aae661291c593" name="389-ds-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="d8c9067b847b47ccc90c3347fd5b366d78a75817dd0d7908dd7a90827c783c43" name="389-ds-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="ce409e44aa28138aba03c466d462e8dfcc540b7889a5160b759421cc9fd3669f" name="389-ds-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="317322a058f15f5470c6a44d5c23e0461c29fea72f694b566a76c7947654a31d" name="389-ds-base-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="f3fc653b868d65b4844cc17a0ffddf08aeac0ad136807cb3e6a0826275c96e8a" name="389-ds-base-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="35d18d41da9ee8e32b010dce5e649867bf823127340235f88476e289ee80d202" name="389-ds-base-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="ab80135b0111cfa18d1d63be4686ebaa52702d942f492e6c486d278167d89fe7" name="389-ds-base-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="2cf8ff50b357efe21f69b4ae9d86399b1f679d941d893fff505b6d46380d26a9" name="389-ds-base-help" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="c3b9792ea895eceba67b04dd4dd5ba63a1214032c6bf75e23fbceedc43e2b371" name="389-ds-base-help" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="74c31db780dc27581a44813377654642e42362554ab98a0fdcc934ebe51f93dc" name="389-ds-base-help" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="136684aee4ac639d2544b8a9a6d07b421fef08e90fb7b9551e5d16378ad66d22" name="389-ds-base-help" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="7f13522ef0c9f51471a37c0dab8d504a3b047e45fd7d8dd70b7cfc02a351a65c" name="389-ds-base-legacy-tools" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="f117a86f82f022fc16aa795183cad39dd87452999bd887273eaf9c86e52170b9" name="389-ds-base-legacy-tools" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="08892c78106853f05e1448b1979b79224277fe681382a56913a03f4bf4d6fa2f" name="389-ds-base-legacy-tools" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="22579e3159f8c90e415c6eb9776596822a50c109ef6857684680cf810e5be17d" name="389-ds-base-legacy-tools" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="d817008edb71caa35ed3a17861dfd385f1f489ca5d6b37f793f9db5ac84efdad" name="389-ds-base-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="8ba8093994848e2c12f8907a2875c86ceb904d8ba19e32a0dd44046b2595d13c" name="389-ds-base-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="6785f8b71c4ac49f209598803c6e3a352ddf2e4e5ebc2eae9ac37eeb58de7fe7" name="389-ds-base-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="f7f444612422a026a04a68b64a5d1ee279d7bc6657e9637c8d62ac813358eb0c" name="389-ds-base-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="78d82b986c13e412a4b8009831118c3c1a4d80507d0b65be945a348cc84e843d" name="GraphicsMagick" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="a9976c70f1c93b3fa2c0cfacb55a6da4559942f115adbb0bfa0d0d4ab3aa4f2d" name="GraphicsMagick-c++" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="b1455c65d87ec3fa7f384d427b51477112b1b40762083f7ffd69a975960692cd" name="GraphicsMagick-c++-devel" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="64220efdc901877e26b7c5531eb4337c636ad3f645b9ec70e2bd08255880f250" name="GraphicsMagick-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="e54b28700fc6b437323760f9a0ea8d99a7ca51840d712b0884a910ee26150eb6" name="GraphicsMagick-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="2d743c3317766f34d210de85929b58527fe47fed6c2cf6c48b0a06960dd7eccf" name="GraphicsMagick-devel" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="e3f5df32b07225cf5ad74fb47d2b47d2b877876104fce8581a0a37d92fbb654c" name="GraphicsMagick-help" arch="noarch">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="4f441621b391523d38009d71e951187cd01675a8885988ef9fc5f3c55825a40d" name="GraphicsMagick-perl" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 1.3.30-9" date="1657540800">- Fix CVE-2022-1270</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
</package>
<package pkgid="9d8bc9e2303353b9428741225e39ce36595e55beb7cf7eb49235def52b20a62a" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="9dff6a7f987e48f05f139da63ecc09801dfe2a2e72949e89c020f8fc2ca43af0" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="896bdc710b33ceecd999bf5b20b61240cbc7e90f741175578d7a44086de00b37" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="6825c45337e5a1932d555029321bb952bdc80f5f839102dc0af28ed2a5928289" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="f1784501e20ab33eb69a38490e585b55a3f007f847bbdfe9f37416d763ea96ae" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="e3ba29dfbfd50056ff2a26f15efbc5d188acbd631120ff3996ebdb4a08b8e4d4" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="3602df5ba802867a90724bae20d401282927f4bbcbb9672f46d65990e70554a3" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="61cb3e8307e3b5791ddcf1177126b5c9355753c731da81b6cf8da6547bc0845d" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="71ce98de686ff3a15c32cda603e60c405b244a07e53339a14b08c0e94ca07efd" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="6517535974b6e175cfc06a039e771f69579facd16db68c0ce9cc0dc8d53a9f68" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="93a2755513cb96b329821b9970cb93f0abc9c3b182ac98be079328d0f72d298f" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="06f6c3c56f57646965470815c408e943a28d7c409618715010fbe6a5660b9cf7" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="ed568195d58f4b734fba872e6c237c5df66eacfa18fc99937d2d904408f54d16" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="7559e87939caf1cb8725dd623e4248de66dfd7f169664b32819f8ea9b5e910c3" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="81b3edc02b3119048aca6a72dc236b86737e1ef61e4707c6a6cfaba1e3c2a968" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="90f0f9a97190585e1c30c790f13389b3810bc2b3017222765ebda1d32aa7f21d" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="6bd4af1001868fb51f1b52e77bcb5a031dfa1fed6ee452c9835f03a6b5f7496f" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="84ebb76786d0959f10d285aa04bb037d8e6ea503356f3225f808f6c9169edbb2" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="e31309ac3da2c99061665c12fa60b272812cffff3314bf4402228693cfd447f5" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="9a7f189e65e20f2125cda706d0af9b958ebf4adefcd917f7b6631c4937348480" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="c268120399b2ef74e72d9d4505262db70b5ddd893f054eb8812cdbed35d5c70e" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="55e88763fe4a3cd221957d1b965bc8e77d5e9af4548ad0d34aa2807a9ef2bc54" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="827db6dcb695796418a4b250e32f882c98062b401315cba3ad067035db54202f" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="a929312ecee60cc9ac89909592ad3199a4a333ab53404ce3d76f1796f83bb6d6" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="2c98b1cb45d7ded5bfedd7978691632d78781afbddddaafba3143d0c5dd578eb" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="fad95cf5f87e4b1e8c7a4208f590ed901aeca4974f73901e42681dce52187dd4" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="0f16f03ea1f57ffa85ee36f65a1a55d8db48e9cea38adcbfaf9aad3e42ece532" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="5be80eaf60b780034cd9153fb5e6149871fae9a0e842555d285fa5a273736586" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="3c820e76943ae9e132d136700004c5e677ed4a43ade3cdab42f6c051010bf28f" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="06d2a2115ab54d769b6fb1d2203b96da40699390f48a456c672e155be4a7f411" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="8088de0297f671397bad06141af6089375f368095e62b54c25e302523a797150" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="47c1af2a7a687955bcade3528d3b4b7a4c764de5f2012c5b893e77b92e6e35c0" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="7c2e4a9e3fb095a1146df59954c8ed0efd273a440f0e5ea6d54455428510c0f0" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="605de6bc3cd35a910edbf6bd19707503d12ac29cb7d0cba2042d25c68762d3bf" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="80c44be6372a359105f03d1cc4d9e06c4c32aadd263145ea54b24e76c0f44996" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="4bd2b7be9980fb234b631b0fd8058dc39f678fa9e6bc19166c3b6f758f03f4fe" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="cba43224d57a4a4dcefcde755d76725d948413cf2a8c15b6a9ef4df9a815f62f" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="78388acded1bfdd97c09f8c3b0dff7ef61ca174b6531465e86e1e71a2453249e" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="80e6be76d633ee433e05787fb9e1a8cc6742197600fb91eb1e240ab55871f3bb" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="e821a19344e9d70fedcdcd713b4f793ac2727c26e2763f2f4f795df7236dfae6" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="662ccacd7fa722e0c120a54c3a1472b987d7a92f96b55cbaecf169db580433cd" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="2971b21d304c26dabd0ee2b5767d8cf8d9ee9fc571010cc988b05db86b1a334c" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="608dd99d1d33fa98cafa43988849316a81e217c5b73478cc0509c8efdf4dd8b6" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.0.28" rel="6.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 7.1.0.0-1" date="1640952000">- Package update</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
</package>
<package pkgid="c9c61e9cc7b48fe840d2cd1c6c070b077557ea7c84a1eb6446235ede761c4bf8" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="1.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-2" date="1645272000">- Add requires open-sans-fonts to fix unable to read font `helvetica`</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
</package>
<package pkgid="6d0fea0c948f8628c913b9f8403bd4c30efde786aa8efcffcf5cc122ce6de397" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 7.1.0.0-3" date="1645617600">- OpenEXR upgrade abandoned ilmbase-devel,reference Imath-devel instead</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
</package>
<package pkgid="668ebfffab669322995fd284d169ecd7fc675d9dac673e0d9ede9015f8f2faa7" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 7.1.0.27-1" date="1646913600">- Update to 7.1.0.27 for fix CVE-2021-39212 CVE-2021-3596</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
</package>
<package pkgid="ebfd3753ea4d209ecda31c1023b14041dc6baacbf9a484b751d3e27d62bd28ae" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="4.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 7.1.0.28-1" date="1652443200">- Upgrade to 7.1.0.28 for fix CVE-2022-1114</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
</package>
<package pkgid="5595108f7bc58981283d37e5a21babddc9162bc63b9c53a2ad2d904b87ae964a" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="5.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-2" date="1660132800">- fix CVE-2022-2719</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 1:7.1.0.28-3" date="1660910400">- fix CVE-2022-1115</changelog>
  <changelog author="chenwenjie &lt;chenwenjie@ncti-gba.cn&gt; - 1:7.1.0.28-4" date="1665662400">- fix CVE-2022-3213</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-5" date="1669118400">- Fix CVE-2022-32547</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:7.1.0.28-6" date="1675944000">- Fix CVE-2022-44267 and CVE-2022-44268</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-1" date="1682337600">- Update to 7.1.1.8 for Fix CVE-2023-1289,CVE-2023-1906</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
</package>
<package pkgid="a11a5975baba64fcc66167e005f572db0ce9477b19f335cdd7973bc463238897" name="LibRaw" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="8fece43c78ed654a903d0714b872d9c5bcd9d13a7bd2bfdca45d79f0429db68d" name="LibRaw" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="89d3b67cfcdd437ac7be83a904b12b91e4f235c7eb16eabff7d9ce846fe72e76" name="LibRaw-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="6494b5c21daa0d669939d8a98070ec8c73f28796de68cd1c0fdc1b3bf93473db" name="LibRaw-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="e9380d710eee1cfd223571ec4db3fc0eeee1bee020e20c15ba79ce7e1d08f8c0" name="LibRaw-debugsource" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="255a374c2ebb9b5a103f456d58fbe8095a90383592b38560e515f7ed27ddcc29" name="LibRaw-debugsource" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="6d23e2aa084eba1f9a786bdc4938678ea4e57c572383d79e20b4a498b83263e9" name="LibRaw-devel" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="6.oe2203sp1"/>
  <changelog author="zhangjiapeng &lt;zhangjiapeng9@huawei.com&gt; - 0.20.2-4" date="1622721600">- fix use of uninitialized value</changelog>
  <changelog author="xu_ping &lt;xuping33@huawei.com&gt; - 0.20.2-5" date="1645790400">- fix use of uninitialized value of makernotes.cpp and misc_parsers.cpp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
</package>
<package pkgid="64cc78cfd7d2cfdf1dbe1c417bdc00bf3b1fee0efac95dd789bf35ea413f9c65" name="LibRaw-devel" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="7.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
</package>
<package pkgid="db0f1d851782ba1f6ff1eabf3f2f5ce274ece49d02560217c7eb5daf92f44198" name="NetworkManager" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="7a5fb33bdc8df563adda5dbee84b1569a23cf29de512f1cd44f33bb51b31f8fc" name="NetworkManager" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="858878e3bc9eb55ad9d6d24f85a427de7d3dca2a6071a64a8e61c86a34af9870" name="NetworkManager" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="1eacb208b5d59cee44574307c8419e075b955323e41812d1e24c78c110b07d22" name="NetworkManager-bluetooth" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="d1872736cdb917ff512461b6970fbedb15d1ccf357315d1329f70fe420da469e" name="NetworkManager-bluetooth" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="224a42fd3197d39b578d065ce884719d27e750b1bcaedb2ffeb4c16989fa5325" name="NetworkManager-bluetooth" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="06f25da4f46771e14140c3dc890c3d21d14422fc2266b8f6a2b2b775c450e5b1" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="80b08179ed698e514c05360d796aac117a9878c8e7c96377bbc4234142966565" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="83645e240d5bf1e326b87c86d2ed432e3666621ca342f8f7378c016ba177ab1b" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="88f21b16892aba913f0e0e301ee11445d4317475a15e65d7c2ea0e951b5f02ef" name="NetworkManager-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="7a2eeb2e0b164631f428d4fcf11319ca281df94ebb6b028784a1ee3ef1e772e8" name="NetworkManager-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="e4b572a197dde32c77e63f12a57dd5f2951205096696786cc7d331511ddd7291" name="NetworkManager-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="ab8c472da9ab0729afc806d57d11e725d65cbba0cc99fb50dc427d4207811225" name="NetworkManager-debugsource" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="3a9fa0af20febc6c08ebc2eeab74da5fe1b042005d40b85b1a9970c6e20027e3" name="NetworkManager-debugsource" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="8e723dca8c5081265d28e905f3df936f5b548cc57c6b01ef8cfce06155817483" name="NetworkManager-debugsource" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="e9208234131bf155c1854d51b43ac7dee9dfd2e03e079f5d18130081e0db3bf6" name="NetworkManager-help" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="eb8eb3b62dbc7204659c6d0a0ca6d0194798ba00be230acb19654140bdbda0c3" name="NetworkManager-help" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="fbb96852fae5ec2c6411f23dd0bd67368d3c499ba77fcde76944b19cb4cb9418" name="NetworkManager-help" arch="noarch">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="f6d289463ba9da701d7c91ac2799e1288c07a66f0307a405b00cbe0d84900000" name="NetworkManager-libnm" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="f96e6ba5c39fe83a92f096ed0cac414723a18d0b52c83a824d36e53d5700b7cf" name="NetworkManager-libnm" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="14b4f9346ad9b336a5b48f862706b385d56c99d39002c80bd5cbc1d0d16c2a8b" name="NetworkManager-libnm" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="e519668250427b45683d6a4bd9a6311ffb8c398a24ef0ebb4a5dca3d58bc29f0" name="NetworkManager-libnm-devel" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="26a5edc02b2da9919ec0244f9f680701a23370a92255cd7102294014daf467f5" name="NetworkManager-libnm-devel" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="d12fd3c4066d262bafb67110be32a635b49505185e592a913858278878b44251" name="NetworkManager-libnm-devel" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="267137cc2ea83b8d8e7fee6dcba8161a472f859b26ebb65c664058e66c2fd446" name="NetworkManager-libreswan" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="40c5f37c9805a72b048240af89b0265f3516f671c197410dd3b31f8a1485f3b2" name="NetworkManager-libreswan-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="35b517cfd05872e996d267a7d6a2f9568aee84b939ec0ba2ec59c7f9eb5acc2f" name="NetworkManager-libreswan-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="5b66801dc61c4b06f0dbdda90be8615626970eba485e3224c6d4ecdd20f770c6" name="NetworkManager-libreswan-gnome" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="065ae11f2afeb6744dc70cff4c88fa6496250f45962aef01b20d51fbaffe9283" name="NetworkManager-ppp" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="74050df9483874923f475e6e7b903e0d9a869036277222c8836c8d24c9bd8acd" name="NetworkManager-ppp" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="e1e964feb11a69ea74922d4048bf57c7e9716cca96bf6fc4f855aa6e02a3d79d" name="NetworkManager-ppp" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="cafea0730eb96ee78120e19bef03807bb8cd675a9620510a156fab9b95200bc0" name="NetworkManager-team" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="1a46912361d4206ac81982e875d00512c9bcf177094d4ce0e65c15e5875767a4" name="NetworkManager-team" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="ec826a1f938e11f31c8a8744ac71cec257bbabaf1995c0b2c44c141a16e8f6c2" name="NetworkManager-team" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="b826c4a7708114299be9dafe1eb76c614d87e03d988fa7b8165988e791dc43f5" name="NetworkManager-wifi" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="8a5859d6128e9a3e5c37c7932338a28f8f4624910e111bfcdaab8548feebe679" name="NetworkManager-wifi" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="3153646f2ca4dde5b2c47b09b7def2b3604874885e94bdda68afbe50a2081cfc" name="NetworkManager-wifi" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="ca1e1cffceeeeb574af8aed28bce622e23cd32a881852b395bd23eb018085167" name="NetworkManager-wwan" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="18.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang@huawei.com&gt; - 1.32.12-8" date="1647259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:recover to 30s timeout in NetworkManager-wait-online service</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
</package>
<package pkgid="e2b7c1bfef57e69f27d3bfc8fa44fea42a4524cbf7e49baff2061487a667fd20" name="NetworkManager-wwan" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="19.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1.32.12-9" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed</changelog>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
</package>
<package pkgid="9f061356873ca96bb449d1b9c8315a872b5fff522871dedfdd846af539a2b4ce" name="NetworkManager-wwan" arch="aarch64">
  <version epoch="1" ver="1.32.12" rel="20.oe2203sp1"/>
  <changelog author="Aichun Li &lt;liaichun@huawei.com&gt; - 1.32.12-10" date="1659096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnm:fix warning when setting wrong ethtool ternary value
core: reload config for active devices
libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
libnm: fix crash in _nm_ip_route_validate_all for invalid-route</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete extra so file in main packet</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-12" date="1664452801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use multi-thread build</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:1.32.12-13" date="1666612800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 1:1.32.12-14" date="1670328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-15" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: split team into subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-17" date="1685966401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:merge ovs into main package

 Mon Jun 5 2023 gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-18" date="1686312000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix mismatch when uninstall team subpackage</changelog>
  <changelog author="gaoxingwang&lt;gaoxingwang1@huawei.com&gt; - 1:1.32.12-19" date="1686657600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mv nm-pppd-plugin.so to ppp subpackage</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 1:1.32.12-20" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete lease file when connection deleted</changelog>
</package>
<package pkgid="17454d8f4ad32919e2088779c99fe61594a8655e4e14ea2e485c439d0c3409d4" name="OpenEXR" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="8094ca67dd6d6410b2b7306370eb6baa877f322d1156877e701ef428250499e6" name="OpenEXR" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="c9d69d419e420a436d843fdc80bad52dd12b11025d8b0d87c87ba44aa9d5fb6e" name="OpenEXR-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="10dd05f938774b2c9f7e8c11803099a9144520001a9d0a9a75ab0b5fe790af97" name="OpenEXR-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="6d64feb89ff9d4d44f9c2ef88afa898bd594ffa426a48ef2b9d5ca291d738271" name="OpenEXR-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="6595e7e32df50025f27910095df2356bfb2eb6230da093d3d3ca4d1a8a632351" name="OpenEXR-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="c58f8cd3384fe2869089eb4f5a57b39649d6ca2c6a8be9d49d8dcc2af491c03b" name="OpenEXR-devel" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="bca4fbcc1afcb9e55e92643ddeb6fe595763275da5cd6dd552a9e38315daff34" name="OpenEXR-devel" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="ea6061575c66235fcd2082f67ab4e2d838f669b2ed8b42beab1655e4c63fd56e" name="OpenEXR-libs" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
</package>
<package pkgid="a4553472bef7cd69570389de51ab5b7d6458c57cf1171e8c5162dc8af0675641" name="OpenEXR-libs" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 3.1.5-1" date="1651060800">- update to 3.1.5 for fix CVE-2021-45942</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
</package>
<package pkgid="dd25069f69221f6ba795a26692682c80814c79808b1c14aa6dfc177611856b7b" name="OpenIPMI" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="b964ca16bacad45b6d133717688f30cca75be54da9d865bdd8e92391b8b52925" name="OpenIPMI-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="5bf011d07c4295905d23819622f8fa13d664b81e74e3e1aa31bee103e4ca89fe" name="OpenIPMI-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="50c24b454f9c0516bb07dd6d77fee5872642f107f94c6f20ee248263c2e964be" name="OpenIPMI-devel" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="9ca9c633bbd6e2f873cb8be36be863913c3390aee43f098d948b818a416bd6f3" name="OpenIPMI-help" arch="noarch">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="50adb62af51ba9949035ccbad36ff3fd05fdcd5d25880cf3decf3de0a7cdc425" name="OpenIPMI-perl" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="4d8d86a209b02c0c22d94d4bdb0593857a03155bfbe50e24f122d082b4c64303" name="SDL2" arch="aarch64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="f0249d204cfd03e3af31aca0aba7fac9ab30b74090b0a1711681e55464041f90" name="SDL2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="0a12cd8b522d1dfc61e3cb7101846104fc9975b98fe34e8ab7804bbe21568d17" name="SDL2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="44fee75981b6435a36d805fae74cbeadf0a7ac4f2f43de2714b9ed079f7a4bea" name="SDL2-devel" arch="aarch64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="ce21ffbe09170bd2bdbc68370e096bcab3bc657f55c2a3d7e275587bb7efe5fc" name="SDL2-static" arch="aarch64">
  <version epoch="0" ver="2.0.12" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 2.0.12-2" date="1641643200">- Fix build against wayland</changelog>
  <changelog author="yuanxin &lt;yuanxin24@h-partners.com&gt; - 2.0.12-3" date="1647345600">- Type:CVE
- ID:NA
- SUG:NA
- DESC:Fix CVE-2021-33657</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.12-4" date="1649678400">- Fix CVE-2020-14409 CVE-2020-14410</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2.0.12-5" date="1673352000">- fix CVE-2022-4743</changelog>
</package>
<package pkgid="6eb6eb443ad2854281ab691d70b49ab0d7fcbb39aa4d28113b61405d9856c314" name="abseil-cpp" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="78d61eb2a4477da74f3c6b93a28cfcc09f4a5e539ed7ae9adad5f84760f3b88f" name="abseil-cpp-debuginfo" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="50bf3f3433dcb3f3a6c700385a5fa682618e512049e9c239d9907da012106208" name="abseil-cpp-debugsource" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="7ea61b3c9ec0f16152da8b38b29c6a499a589711ba799d0906fc99b35532f3a7" name="abseil-cpp-devel" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-1" date="1667390400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 20220623.1</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 20220623.1-2" date="1668168000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 20220623.1-3" date="1668427200">- add loongarch support for abseil-cpp</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
</package>
<package pkgid="dbab2705d78c2bff6c8f2292ce39043c936ca9abbf91695d0f93cf58c7bba3cb" name="adwaita-qt" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="911cdcb2f93be64c4de559bd6d7a73a42181e206dfccb99c5ad24850211b0e08" name="adwaita-qt-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="e947e61aa94aea009cf170b7ce233685fb01c9a684c74931ac5c9278ca194aeb" name="adwaita-qt-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="be34d0b0020fa7d8f097225a0b45b1660bdd76c80d429efaf2735027eb614888" name="adwaita-qt-devel" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.1.0-7" date="1688731200">- Modify changelog release version</changelog>
</package>
<package pkgid="be1f523dfeacf79e17b9dcb3fac6217391a67b1aa02139f1270ee14a7c38b537" name="amanda" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="d7ad2676832c84df87f2dc79b5ab4714b1b555163b379f55bc37548ab2275a90" name="amanda" arch="aarch64">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="cf5d8aabf3750db67095cb7271b1f40b674d4d8a96bd4a8839adf0eb3a29d87f" name="amanda-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="640d2a800723a77d1fb14606e4e37eea3718652ac1d18e7b997fc8536025c987" name="amanda-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="57e0e37faacc14d58506d0a17de88b0a6f51e8d9276b418cf2bf20422de3c41e" name="amanda-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="64115550f85e8c6594e40e4413055c7c3724c52f4a5f0089d94d85424a4f3942" name="amanda-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="b9b154a9407f65865e7b568567dc2ff776ada30e3771544b246cddcac9a0fea8" name="amanda-help" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="23.oe2203sp1"/>
  <changelog author="Haiwei Li &lt;lihaiwei8@huawei.com&gt; - 3.5.1-19" date="1627646400">- Fix multiple definition tu_debugging_enabled</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
</package>
<package pkgid="e4f915a5ba19ce1f9f4610ebe01000d5d6fb206f2b2e06b67b282ab2fafef0f9" name="amanda-help" arch="noarch">
  <version epoch="0" ver="3.5.4" rel="1.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 3.5.1-20" date="1655726400">- Skip hexencode test case as it fails with new glib2</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-21" date="1668168000">- fix hexencode test failed</changelog>
  <changelog author="luopihui &lt;luopihui@ncti-gba.cn&gt; - 3.5.1-22" date="1677585600">- Fix CVE-2022-37704 CVE-2022-37705</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 3.5.1-23" date="1677758400">- Add install require sharutils</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.4-1" date="1691496000">- Update to version 3.5.4 for fix CVE-2023-30577</changelog>
</package>
<package pkgid="dbcd8f233eb14b1d6b6566099b3e589485e53e1deea3aead06c749fb09f08f81" name="anaconda" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="697c125ca9de54ec69f58af7c9296c5e4b0104106c817754a99ca2113753a6fa" name="anaconda" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="5585f49350d40be715b249e90d4a81b1789ec084ee03b30d67b4cc018ead61f0" name="anaconda-core" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="26a5d4c50ba3c93279949ebef206a6b0dea289f3bfc4f2c54f1ce4cff12338e9" name="anaconda-core" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="4fd5bc13301546a900855d9626eb92e1e7d7e88989901054d5a02b6cb1f6a208" name="anaconda-debuginfo" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="c842e3979c9452c4a13f86c0cfd88770d5f546cfe065a8a89eefb714487384ad" name="anaconda-debuginfo" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="14223ba47a4a1cd453a9f6cad504ab9b52051ff1a6e90569abbbb2ef3c8e523e" name="anaconda-debugsource" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="b5a5a61cdbd4c26e8368246de7631a084d192b1646ec4d8b1c253fa5ab75a459" name="anaconda-debugsource" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="15016cd1ff74b176a4787e441b4c8244f15b18d9ed696376f381dd5ad7224594" name="anaconda-devel" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="110f31108fd3a3b4360fda96c3c62da0e0b0f28e2fa57a4affd1fda239e5d613" name="anaconda-devel" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="9cc9fec554b04c65140e5444962ec62e5fb4e99f7dd83460ad42b78c4e0db646" name="anaconda-dracut" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="a08dbb55f8d3787e9cae54b34f5867b371d779595206328665d7845cdfaad5d7" name="anaconda-dracut" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="f2250825b9d10d879712bc7aea42649845c31d62907bccd16aaddf9e5075c59d" name="anaconda-tui" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="13.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-4" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:open disk encryption on openEuler</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
</package>
<package pkgid="e887f507054a3c1249c3c039689ad7dd913898e1813863d3e3fc2e83413a37f9" name="anaconda-tui" arch="aarch64">
  <version epoch="0" ver="36.16.5" rel="14.oe2203sp1"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-5" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pxe kickstart version with local pykickstart
       and with build save patch by source4</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add logo with install
       the kickstart version change to patch</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-7" date="1669723200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change product name not with upper
       add SM3 with tui</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-8" date="1670673600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore detect enable smt
       open swap in storage</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-9" date="1671019200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt active connection without interface name</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-10" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix conf of storage</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 36.16.5-11" date="1671537600">- Type:feature
- ID:NA
- SUG:NA
- DESC:cgroup files is a additional enhanced cgroup feature, which will
       limit cgroup opened files, add cgroup_disable=files to
       default cmdline to disable this feature to keep cgroup's default behavior.</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 36.16.5-12" date="1672056000">- Type:feature
- ID:NA
- SUG:NA
- DESC: add loongarch and sw support patch in SP1</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 36.16.5-13" date="1672142400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Change patch sequence.</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 36.16.5-14" date="1677240000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport password tooltip text adapt language
        close disk encryption</changelog>
</package>
<package pkgid="7cdc26d53ec6a268569bde17ecaff9d432b79671b81dc905da74075f532217e5" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 2.9.27-1" date="1646136000">- Hostname module support openEuler</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.9.27-2" date="1647604800">- Remove require python-keyczar and modify require crypto to cryptography</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
</package>
<package pkgid="238cdbb43f14a2eb17640dd7a591a3b310fc58423bcb0c54af0276d883650d4c" name="ansible-help" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 2.9.27-1" date="1646136000">- Hostname module support openEuler</changelog>
  <changelog author="huangtianhua &lt;huangtianhua@huawei.com&gt; - 2.9.27-2" date="1647604800">- Remove require python-keyczar and modify require crypto to cryptography</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
</package>
<package pkgid="9df345028f2c4335a995d4dd534898e077493b94aa0f3598f2d6ee1725d59b8c" name="apache-commons-fileupload" arch="noarch">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1.4-2" date="1678104000">- fix CVE-2023-24998</changelog>
</package>
<package pkgid="64df134cd3e9f073a1e4ddc1d88a7cfda13bc6e3cf507c35577d925d546b78f8" name="apache-commons-fileupload-help" arch="noarch">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang&lt;liyuxiang@ncti-gba.cn&gt; - 1.4-2" date="1678104000">- fix CVE-2023-24998</changelog>
</package>
<package pkgid="648451ecab3465e54a2829ac02ba7078ae3848f21985579f0ae4be9dafc829fb" name="apache-commons-net" arch="noarch">
  <version epoch="0" ver="3.6" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.6-6" date="1685966400">- Remove TestConnectTimeout for ftp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.6-7" date="1700740800">- Fix CVE-2021-37533</changelog>
</package>
<package pkgid="013d395ab6805b51b51afabe888d3b4d47c3b50e7739fc7fc3aecccf534f8c5b" name="apache-commons-net-help" arch="noarch">
  <version epoch="0" ver="3.6" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.6-6" date="1685966400">- Remove TestConnectTimeout for ftp</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.6-7" date="1700740800">- Fix CVE-2021-37533</changelog>
</package>
<package pkgid="1a4085cd2e4a4c832c3a9a2380e38a11572004e29e82a2a99d1d24ad19893053" name="apache-mime4j" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 0.8.3-1" date="1655208000">- Upgrade to version 0.8.3</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.8.3-2" date="1709208000">- Fix CVE-2024-21742</changelog>
</package>
<package pkgid="8f9c291fa72f2bd816f483b17cefa19206ad100bde5cb3234e199ef9d5769b6b" name="apache-mime4j-javadoc" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 0.8.3-1" date="1655208000">- Upgrade to version 0.8.3</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.8.3-2" date="1709208000">- Fix CVE-2024-21742</changelog>
</package>
<package pkgid="ff8178468cad818e5dea8b7f1092c254ca520f729dc9189b32125ce2b91c0699" name="apache-sshd" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="2.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
</package>
<package pkgid="61937cadbff79443d64f8b1b5f4e2fa2df76761a8248a94c63d4cabe392edd62" name="apache-sshd" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="3.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.9.2-3" date="1705924800">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="346aefab5f2b40339a94281b3b1a0ac23bd77678d671e1bb1f03c010af06f363" name="apache-sshd-javadoc" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="2.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
</package>
<package pkgid="e52150a5869da3a0630851c9839f25b428f69d098acd44cb5a3c6bbab8bd5a34" name="apache-sshd-javadoc" arch="noarch">
  <version epoch="1" ver="2.9.2" rel="3.oe2203sp1"/>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 1:2.9.2-1" date="1669032000">- Fix CVE-2022-45047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.9.2-2" date="1704974400">- Fix CVE-2023-35887</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.9.2-3" date="1705924800">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="26c7725f5513526947c429894be0992ef483e065d2373e7f29878a4d8e0b9f41" name="apr" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="a3f74055e7a5c97de17cd7fa93bbbcd8c7cd67a958bc285d921b3fd8eceabbae" name="apr-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="aca4adb1bda5a1447ebc0024920e54800db6484aace2399d9c6fbbd6ea9a4000" name="apr-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="328b13d8f5bd05d68674518a2c0418f44e89093cf567ec1b7f23c10e4cf758ce" name="apr-devel" arch="aarch64">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="8527c07c04a3e29100d3f501b3a574dc78c4f5ef6d0967c69c1513782649ca5c" name="apr-help" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="6.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-2" date="1616155200">- Type: CVE
- ID: CVE-2017-12613
- SUG: NA
- DESC:Fix CVE-2017-12613</changelog>
  <changelog author="shenyangyang&lt;shenyangyang4@huawei.com&gt; - 1.7.0-3" date="1617105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
       to /usr/lib/xxxx</changelog>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 1.7.0-4" date="1639742400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix the compilation failure when autoconf-2.71 is used</changelog>
  <changelog author="yixiangzhike&lt;yixiangzhike007@163.com&gt; - 1.7.0-5" date="1666612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use the macro make_build instead of make in build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.7.0-6" date="1676289600">- Type:CVE
- ID:CVE-2022-24963
- SUG:NA
- DESC:Fix CVE-2022-24963</changelog>
</package>
<package pkgid="a75f8a08baedbcec4b95d42b718a1d90db86670ab5dd8b4a5807637e88e2b42a" name="apr-util" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="56cfc3e1c57c3b58cefd43899f2c35b223c260a9c15344fdb5338d61b2886c9a" name="apr-util-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="03d68afbe808e5b6f61c5eec6a1ac2a604f33ca4aa8153012341c513401af8ab" name="apr-util-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="88430317288fbc8095e153b8deea76763d0f34096af7c6a7e62d9129333dd0b9" name="apr-util-devel" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="edcbd6648fa28946d73e443af53b833085123ba930b1bd15b354258ea1fa447c" name="apr-util-odbc" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="e06d57435392f6db4bdf6dce930ad71661bcfc17a27f392387c3eecb2c838cb0" name="apr-util-pgsql" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 1.6.1-12" date="1624104000">- BuildRequires: replace libdb with gdbm
- Add requires gdbm-devel</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.6.1-13" date="1659009600">- add sw64 patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.6.1-14" date="1676376000">- Fix CVE-2022-25147</changelog>
</package>
<package pkgid="daf47b306f5097eae923ac4ee08d91441f8ae383e6cb82de720d5f9edc573e80" name="arm-trusted-firmware-armv8" arch="aarch64">
  <version epoch="0" ver="2.3" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
</package>
<package pkgid="8ab0ab698233a68c91dffd0bdc87e8131d13c793623cc8ffa8b0a6bc38757399" name="arm-trusted-firmware-armv8" arch="aarch64">
  <version epoch="0" ver="2.3" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
</package>
<package pkgid="4e00cc8736b1def29a257c70ca5958651ea19e407463b9bcab86a1c009521a23" name="arm-trusted-firmware-armv8" arch="aarch64">
  <version epoch="0" ver="2.3" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.3-5" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
</package>
<package pkgid="d2f59974a26e28134f96ed3a80ff89e80fce331d41463abfcdb06883ead87b99" name="aspell" arch="aarch64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="81fc8cd32da6328bcde9ec66046654d078653b4e795f360d0b877e9ccd73186b" name="aspell-debuginfo" arch="aarch64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="a8e0669cb7e5afb1faaafaafe39d99e98d0dd60a3d1811e0770e4b20c53df154" name="aspell-debugsource" arch="aarch64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="cd43f91abe79adbb2506c037e352064dda642e5ea38310f6d845082d49155412" name="aspell-devel" arch="aarch64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="294156169b12e3257c3f9575812ff8250b6d435b9c2d74d674826b7d0fae8434" name="aspell-help" arch="aarch64">
  <version epoch="12" ver="0.60.6.1" rel="30.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 12:0.60.6.1-29" date="1659009600">- add sw64 patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 12:0.60.6.1-30" date="1710763200">- Fix CVE-2019-25051</changelog>
</package>
<package pkgid="79e23d3fb387b2dc4d23f518ba9d6804f494ef189c20b7ab875ef5a010341fc2" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="8fdbeb14987777fe3a312d8948c5e8548cc56693580687067b75b13c6a4e6df5" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="9509e46a53cfc9b224b8743fbd30f7a95ba14aa29a6075b95079491fbbe0816d" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp1"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="b6c149a4a3a57fe3d8aea358050108d84179b6c26b3499071ef5af45ee6b2b85" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="ccdbd50c2c1aadeca11c52c89f7194f9dc491b61656a2f25c857afdf19e6b239" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="6bffc6f1a17482a36cf5015dea6511b26cbc6a0f76873378218f0186bfedd92a" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp1"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="7f842757f9df92c6697969c3d376be48602d69f8852dc5bde12547580d790a8e" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="1ceb1b9cadb298f16d83f2750fcab4eb6ee36c6cef313f3184d49d1aa385f354" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="4a34bc0b422afd7d0732c9a3ef71a10cb5c88b1ebe4325f0a5f1d07a0e731a72" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp1"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="f50199f975b2bc3c79718bfdabd3442d0b830ac49e3bcf3e78e8256f8dea1271" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="3825c5e760a643205ac5273d0bf06bd3e1f00b7972423d7c775440dfb78cdcb6" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="8c37354af3ce1aae67360d7cf9eb416c09632aaa7ee23dc79a5af0f1a3ea36c4" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp1"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="e4361459ab3ac29551188c788808b40a9301faf6d93efaef52c6ceda5490f37c" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="0fd7fdd8a916267c4dfc4dca93491a8f8f4e3ee07c1caf9bb0b38928ddf1b513" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="99c65a2c0cd90dbd2b6fe0c4fc045acde31a8e9b24e0fc6a9731a6c6d45e872d" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp1"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="786855530d725cb21e02cd573a807e90ba3ee2262fdf57a01ece61b8ed65d956" name="at" arch="aarch64">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="6e20c84f5ccb03e83936332fa2e53e16c75aa7d67daa6ca1b751d279856b2a70" name="at-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="10410ebac5f9151da0eda614381a8706aceecc24e312b52b7d2179c79f09f3f7" name="at-debugsource" arch="aarch64">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="02cc6098b8e6b4b71784610c98c527acdd7da7f9d700ec4c87af88da83a5f3d6" name="at-help" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="4.oe2203sp1"/>
  <changelog author="yangzhuangzhuang&lt;yangzhuangzhuang1@huawei.com&gt; - 3.2.2-1" date="1639224000">- Type:update
- ID:NA
- SUG:NA
- DESC:update version to 3.2.2</changelog>
  <changelog author="yanglongkang&lt;yanglongkang@h-partners.com&gt; - 3.2.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adding Patching Operations
       provides relibility and self-heading capabilities for service</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.2.2-3" date="1669204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Source0</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.2.2-4" date="1686312000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:provides reliability and self-healing capabilities for service</changelog>
</package>
<package pkgid="6cf924d1faba71809d1c0d7eed43a4cad8f4f9cd35d0b6e2bb3a6a644b52d972" name="atf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="1c267b269c330ae6ed855d02911ffe71e8e2ef9dadafa0f0a7bed717a8da6da2" name="atf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="886e0e1ae2b1420f6297e127df190df3b86dcb42885fb599bfc7aebbf56ef2a0" name="atf-help" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="c8d5a36b34ff4a8d97de923be36bd3c9c463ff94d7a937d2a7e68892ab832a05" name="atf-tests" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="0e3d012fd3195fee613757a42aa7aefcefddefe9a34b537e6fa09a4361fba576" name="atune" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="3c64c37ed21ea00352d0ceeebd01ee3371e287b3dab5158a5e881832ed8df206" name="atune" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="959c5e8fe1b79a5a434dc99522802ba80814f4b726b2bb1a6ce9d7637564b243" name="atune-client" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="5864d701b63a500fa6f792781f1ad36eb797b2b31b3af531a50da82af7facf1d" name="atune-client" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="a02776fb784cde5067ce59df0bb50dc75faa34c90bc814810997a0b2235c7111" name="atune-collector" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="3.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
</package>
<package pkgid="1f3f4e4ca9d42b9cf2deaefca8acaf316b073f50f57f329c6738be62c0e0f8ae" name="atune-collector" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="4.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
</package>
<package pkgid="7ec938d952bdfb564a6e1c32e607186b6b924b0a2db092abcdb0c806e0764777" name="atune-collector" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="5.oe2203sp1"/>
  <changelog author="hanxinke &lt;hanxinke@huawei.com&gt; - 1.1.0-1" date="1636632000">- upgrade to v1.1.0</changelog>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
</package>
<package pkgid="1d369a57f6b85810aa1995c827148e32516f857399b1eba537001c5c5990aac2" name="atune-collector" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="6.oe2203sp1"/>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-6" date="1701259200">- feature: add rfs and rps/xps=multi to [network]</changelog>
</package>
<package pkgid="66b209323e3821130f3cb5e2b133fe9123b9dc46fe1169a379558a09568f53d7" name="atune-collector" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="8.oe2203sp1"/>
  <changelog author="zhangjian &lt;zhang_jian7@hoperun.com&gt; - 1.1.0-2" date="1678363200">- fix bug: list index out of range in virtualbox</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-3" date="1690891200">- feature: enable application config</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-4" date="1692187200">- atune-collector: add backup for apps</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-5" date="1692705600">- feature: add [network] to CPI</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.1.0-6" date="1701259200">- feature: add rfs and rps/xps=multi to [network]</changelog>
  <changelog author="weiyaping &lt;weiyaping@xfusion.com&gt; - 1.1.0-7" date="1702641600">- fix bug: ProcSched.report: list index out of range</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.1.0-8" date="1710244800">- fix CVE-2024-24897</changelog>
</package>
<package pkgid="7ce4452b5999a500734297d902d0bf7448e20f72be0323e908de506425ed1465" name="atune-db" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="a3f8b76c74b13dae9ad9b80902fdaef0ecb17e02a07fae1c3ab0c89998981885" name="atune-db" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="cd0b08e0d8c811b47184667c1578572adc5a0db4896dffef06b0ff738b1012c4" name="atune-engine" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp1"/>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-3" date="1646308800">- fix start failed of atuned service</changelog>
  <changelog author="Bin Hu &lt;hubin73@huawei.com&gt; - 1.0.0-4" date="1646395200">- change Makefile A-Tune version to 1.0.0</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
</package>
<package pkgid="900b669fd6b90fa616d3d67101e24d81588815be807e9b4d3924ffc1adcd7b6c" name="atune-engine" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp1"/>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 1.0.0-5" date="1674907200">- fix build failure that unitdir cannot be identified</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.0.0-6" date="1677844800">- Add sw64 architecture</changelog>
  <changelog author="yuxiangyang &lt;yuxiangyang4@xfusion.com&gt; - 1.0.0-7" date="1682078400">- fix atune-engine process remaining after remove atune-engine.rpm</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-8" date="1691668800">- bugfix set collection/transfer/train dir to specific dir</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-9" date="1691755200">- add support for loongarch64</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.0.0-10" date="1691755201">- update sw_64 support patch</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-11" date="1692187200">- atune add service restart mode</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 1.0.0-12" date="1692187201">- atune update Makefile and logs</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-13" date="1699444800">- define-fix-privilege-escalation</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 1.0.0-14" date="1699444801">- fix-collection-train-file-overwriting-through-soft-links</changelog>
</package>
<package pkgid="0ab995b6eb32a7e523df72eda195bd6e5cea06273c4f75d2afd844c63214d2fb" name="authselect" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="a25474a3473b8d6c87616f56a989d61a6cc281f791f3740fd3bdd1ff0e6e9fa0" name="authselect-compat" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="5ecf335f4de4a8b46115fa2ae3cac695550480cccadbef33f21f34747d6dd6e3" name="authselect-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="b0003d3944327703a38fbcba2b97a29d150945514f9635ff2bd4bd615c8f86f3" name="authselect-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="2ef9cb39acee127879ecef94d1e02fb354ae88000e182c383414a94c7304cc41" name="authselect-devel" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="d2484b6c1159b391934fb0922d90e18bb5ac815c5594a431f65e7fda16cdb40e" name="authselect-help" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 1.2.2-3" date="1626696000">- Delete unnecessary gdb from BuildRequires</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-1" date="1638273600">- update to 1.2.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-2" date="1642161600">- revert "remove authselect compat package"</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-3" date="1647864000">- fix change date for version 1.2.4-2 in changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-4" date="1651233600">- delete duplicate file README.md from authselect-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-5" date="1652616000">- provide default directory /etc/authselect</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 1.2.4-6" date="1660564800">- cli: fix memory handling with new popt library</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.2.4-7" date="1685448000">- fix the failure of login by root</changelog>
</package>
<package pkgid="f41df7d55483bc12f68bb14efbac2e188141ff67897922cf0c56c9adbd6f28fb" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="178e12a356f0501ae2c959d1a6e2a1892dfef739416bf682806b9aa4f6faa591" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="31ace92e18c8baf9e764d023834f2e6a672fcfc04d015f0194b8a6499d4d74c6" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="842af9a341965468b08ca4bb862c7207d68db8b06d7a2bb50f2d9abcb362cc0a" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="06166eb0715a3a512d4e379d7553b608ffe3366372966954a46378a93763a931" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="e24f6c5d34c797a04e1a5786b948e6c943087622a638f4f20bb45448e90a6683" name="avahi-autoipd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="3be7bc4664f7269f0161f9774c7c84bacf8b2f1ef7e933cca206452ebb223a56" name="avahi-autoipd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="ee2967bd4ee417333312464808f8ec3a04679ffb017cf68ce6ed58de0928fe1c" name="avahi-autoipd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="cfdb9fc7e5efccbc3f287140a745796140b994e5acd1cc59b5c8be1a8caacfdc" name="avahi-autoipd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="91d43c2abfd981158d941a414d5bb1106438da185ee480d4eaaafa4eb0aa77d0" name="avahi-autoipd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="e7d875630beccf8877885e6e2d455c625f0f557b214b7649cbd8ea86a3bf4c57" name="avahi-compat-howl" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="0f04544d458f93f6fc5f72fe1fc8e34181db9539452c2d13e2394c97b093fdcf" name="avahi-compat-howl" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="9a7589d3e7b2da6421b5d8e8b0ad3203ece1b71d571eed6dec7f352cd04bdceb" name="avahi-compat-howl" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="8fd84385cc8a557527be2a7f1acfd73e10e22a4a1e45a618e101cb0997581498" name="avahi-compat-howl" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="cc51dca41f4e226f06f4a0caee19db80ba688b1e6a042f2591ea09cefecd95e1" name="avahi-compat-howl" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="6a96172dff3387a52dacbe8fdd6d2291fc908c4c5b8b2623fd79ceb1f12f9be2" name="avahi-compat-howl-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="de434e773c123271b9939943e5e97519948d0202381e3f98d0512f296c36f645" name="avahi-compat-howl-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="8581c1714e50152458b0a65294df3c752cdd99790209938929d3510d825411d5" name="avahi-compat-howl-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="e21716db9bfdb50e5c34823266c30398ff2cf7525a6498a24d66874200aacbc1" name="avahi-compat-howl-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="1627fdd5d9de76a0863cafda74feac9b7634191e9a0520fb5abadbd189aaec21" name="avahi-compat-howl-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="7c78b6e646b48ca89296ea5823241255842a1843b068918483721853b889b86a" name="avahi-compat-libdns_sd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="fdf2ed1d0b3d531ae4575372682720ced554e35565eefc3221968c8651a82b7c" name="avahi-compat-libdns_sd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="04cdf1c2e9b1e47939f2ff7eae2c3205f128a6ef2bb74d518684f37ef38109e3" name="avahi-compat-libdns_sd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="a44786bda51803c082e0a6e1967b2f178c23d07d5b126ec8e3dd7e37d883d1f0" name="avahi-compat-libdns_sd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="6b7d62f496f2a0ea9c2464de48c84fcc965cacb90ea93c0c36e533006f083228" name="avahi-compat-libdns_sd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="1cb50e1030088d2a2718f832b2e1406f93eb68eba73c9a75e86c31a4db9cf07e" name="avahi-compat-libdns_sd-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="54603c96051507539d9c010f81147aab488a757eaa46763a9a02b7cd0ff3da0f" name="avahi-compat-libdns_sd-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="3f35d472fd4292aaf1fbd05dcaccbe39e7e541ffbf6f7b540db603831f287179" name="avahi-compat-libdns_sd-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="f6aa6a2179f12113c325f8f99c711c7b4e78ad1d86bce529ac79634143d7b5fa" name="avahi-compat-libdns_sd-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="5abc63c97f94ef21f76f7977831107b2b8c6d8da3bd314bf84f2e5aafd8b7d01" name="avahi-compat-libdns_sd-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="538ed5b9274e243d191da8ec703416e3ad256db4f8aed034bfdda43b552a5df7" name="avahi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="50a518c16b87352d135447c89ecfc2ff1b7251de2d8d158d17af2d01da43dfcf" name="avahi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="0c8cfe9f01e826b58705219544a0286c5c951e72e6ef1a2afac18c52663901f2" name="avahi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="829c55cf9a432850a6d382f49562abd1a19ab94f30066f70f26b901c504b73e2" name="avahi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="53667079313025c226125bc859edc432c27307614756a6692acc66f72b284ecf" name="avahi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="f6ee1b67d7afd7c99969c6bab31d9005cbe1061bef406ab711bc1d3799137ab1" name="avahi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="3bbbcc21a7696aa9b766873e0bf625feee36467f2fe6af7599894e97b7d93458" name="avahi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="3f3fa5063f98dcf65f8c25449806fb2e543e784704f4da58c784b69b6bdb082b" name="avahi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="1c0cbd7f17a9d1a1f65f72dee7dce066da2585d70480f038640445170fc3a3e4" name="avahi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="9f84bca89ea941256d7a2b740bd100dfd9f4a36d057f7df9e58d89735749b8fa" name="avahi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="a4f9d6a79e738c16dfb61499c9a480087516b75a9da9528b0fce1de8371b8eb1" name="avahi-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="95b19fdae029bbc4393fa90a3f5258b37dd6231f96da18cc94b00a3123fb7ae2" name="avahi-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="8e45f3f52baaf116a8dddbfc65cbc20bd120fddb3cb51b87ccdc2f6af017e67e" name="avahi-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="5281ba0c99b90b0f590babaff383bcc7c24fe2f3e1ff7350785fe1d5bca24b69" name="avahi-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="3a9bbacb5e8fff1ee49185fc7d54259881d32d9ed65c787cf1f99c0d13ead5e5" name="avahi-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="85384377d6ad57c9ff1e8a1b104c8e1eabeb4b18ad338988232e9e9bedde02b6" name="avahi-dnsconfd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="5a0e6a4fb42a569523fe9b24f73446d8a271845cebc6a66fd372eb0d0a190e12" name="avahi-dnsconfd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="fc51adea566d73a4bafe54ed3236f67a57476c8c6d1e349c664d502994f1a652" name="avahi-dnsconfd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="125afe1a284c7a4a5a235134b74b00dc22fcd72b58bc86ac4e5b47b2046128b2" name="avahi-dnsconfd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="c7505007b912d070dda3b24719c78504e155858d4867f151f5b8806bc4df599d" name="avahi-dnsconfd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="56033c51020f345eec16a9258d5c65dbe9f264a1cf913c8d0a7dcbe38f8fb150" name="avahi-glib" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="ad98dc5fe5b318eac1e95be7190dc5de58c83c91afc3e64c5350a985e07c8c86" name="avahi-glib" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="306a28e3f41fc37aff7ad58e9e53cbbfe00a2373e2644c897a8b8f4161259554" name="avahi-glib" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="5a3aa2c94d316e9adb5dfe8a3323645d72ee27a37669869078a09c31e813226f" name="avahi-glib" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="9c0ef86e00505edd87162311418aa003c42c123c704a7fff6a2795bfcc88027e" name="avahi-glib" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="efe1b9c8b262cd7c2722a96cab2287f3569eddd2514e8b29d725c81820b831b3" name="avahi-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="134beaaf267f17f98e6d0d56a15c48aa494e53fd38a3dfec1e9439ca05b06a44" name="avahi-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="34bf60d9fd0acfc1c256e76df08091a1fb0958680c65630f1c2f1db6c821bfe3" name="avahi-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="eb35a4b99a817182b925757cb7ea6fb44125bcab4e24db1a8b71ae90ea2efcf8" name="avahi-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="c5483fdcf8c6c5e39a31555af895058047502b6696d604a2ffd4eb6c329b81b6" name="avahi-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="16138ecd49974aa63a54f6533a7cb46b5822a4f9983fba7e764122c5d3357133" name="avahi-gobject" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="b3af867be5bd4c079c0999651eef8c10a75d2dca58ecc188fe939a943b21798e" name="avahi-gobject" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="e46cdb9bb4a4d25a8ac64b1bff89f09095891ac42ba896a5ce163bac2d3be1c5" name="avahi-gobject" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="7c8d1b6e4434a2d794dbcc408feec585600e23bea77ef3ecdccea93db87a8cc3" name="avahi-gobject" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="f34aa934274add4c32f86685ed964e4a3d8983ed45fff03addb612e9dcec5337" name="avahi-gobject" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="ccdb96c6b70bfedbffcafecd1af1b94abef9b7169b71f11092585a5c60bb4902" name="avahi-gobject-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="bf292d17e1fa09838551ee1650ab5061247a8d05cd021d752d3502ccd1fedc8b" name="avahi-gobject-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="3dbc79ecf04de7ad727e64d422a81397ee26dece13a7f5ea4467fd19d0fa7d3d" name="avahi-gobject-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="4fc3d1ab4a5c7a44d90bb9b981820bf8fc021f859730b46f49808c7a2799c7da" name="avahi-gobject-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="9b7065ec0fe7d056a0d9de35bf0c4abb66fa1169806b09ba88bdc17a4f849530" name="avahi-gobject-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="061b778025e9f790b5a965232142476a88a5d0a9f79310605a4eb6f12b2a3953" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="a771ece6ed4735ddeda4e73a4d823c1704e11818490f6218c55035b9e1a9f7a7" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="9c09e49a1d820d0fa392167f57f0c4f4171b1afbff0c62b8eefd4367d0a10479" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="8c4573039b94c7ff2e9ce2fcb966d4de47ab2a088514b464b506fa9c32109478" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="3d69e4c05373ced805cf58136fc70ac2fddb7a7887a6f8841e80ce5f41b1b0ab" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="e2a27e864f04fdaad9809aee5cf947c05b81cfdc0f96f6f135507bdff4a3ba40" name="avahi-libs" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="91fe3c59417f764c1cdf85ef6dcb3ba298149324108d0d98f7cc6989e58b900a" name="avahi-libs" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="3eaa28142e94ceb43a9885b5e9835fdc36cb286ef388712fd92462cc997e1491" name="avahi-libs" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="3156c591d4e1001910357d9eec6ad308bd927c83d7a6030979ac4ad8d7f86496" name="avahi-libs" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="77bd4a73d79020deaea22b853738f162c922f217a3860aae1d898db2dd697404" name="avahi-libs" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="7760b0b7a4970358ae00bccc78119ebbfe91d765e81cb9b56592c39faac17bd6" name="avahi-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="71ccaad4aa31e96299efe1096d20846b2165223923f02c2996a78243192b7f87" name="avahi-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="ca957733fd6154ec1935c9de3faeddfc30ced5d5546f7cf9c79747790e92f54b" name="avahi-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="dad62983122dc71928e7c752271546ab3bb7b8067754cdb0457b642c921770ac" name="avahi-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="eeb6d0cfa28cfa7f8610924d70b32bed966abaedd5da9a36f358d846b8cb8375" name="avahi-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="9fd8b9d7bc465ef8f3bbd58446d1895a7c49a926083bb79bf275de596f13c947" name="avahi-ui" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="2c0e4658dd014ff3e0b0002c175c42800334a707052ee249384b78529c578a56" name="avahi-ui" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="5203a9864195c053a84c08f567abe3249053abc5f44babf54c1ec52ec2cdf872" name="avahi-ui" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="a88f927f9c4a0a71aaac3a715e0a8e177c72db695dc8a236db9b9913332ee31a" name="avahi-ui" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="0476e78a6d8227ff76a3f701de5296b5856755a263178d3ce98cc7421cde727d" name="avahi-ui" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="cac0ffc76c03bdbeedcac534ad0955ab46dae8bb1098dd9b2670d5aea05f9917" name="avahi-ui-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="790c8079457124d59b008d1bc6d5f07515aefd290a9774c788aa531178f8cd60" name="avahi-ui-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="18c6b19f5527e68a73ca609e09edbf615dd3286f86ffe82401ccbe9625de36b7" name="avahi-ui-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="50e550b3e57a1bde51f1b362d25a65146825135b9ed2705c9542d2918569af27" name="avahi-ui-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="f51029058ed61804b4cf7aa282a360c5d9966b45afe6372ad6d48745c0fbffce" name="avahi-ui-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="45ede3b12a76608df1e8c309cba323b462ccd18dc56039ab51a0c6274668694c" name="avahi-ui-gtk3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="15.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-6" date="1623758400">- Type:CVE
- ID:CVE-2021-3468
- SUG:NA
- DESC:fix CVE-2021-3468</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-7" date="1624276800">- Add requires avahi-gobeject when install avahi-devel.</changelog>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 0.8-8" date="1624363200">- Fix error spell of avahi-gobject.</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@huawei.com&gt; - 0.8-9" date="1626091200">- fix build failure due to lack of gcc-c++ buildrequires</changelog>
  <changelog author="liuyuemng &lt;liuyumeng5@huawei.com&gt; - 0.8-10" date="1626264000">- Type:CVE
- ID:CVE-2021-36217
- SUG:NA
- DESC:fix CVE-2021-36217</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 0.8-11" date="1630324800">- Add autoipd,gobject-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
</package>
<package pkgid="fc393d7eacc836f593e88143b30a2bab4b2d8f9da18398430f67b6b181379cdf" name="avahi-ui-gtk3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="16.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
</package>
<package pkgid="a9312c93b694e110df1fc295a5ef5d8baa98e81c0ddef320fc84d9abf17d0f1a" name="avahi-ui-gtk3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="17.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.8-12" date="1636372800">- Add avahi-glib-devel subpackages</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-15" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-16" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
</package>
<package pkgid="c0f109db0bc5c8cf21658cd3f0b2e43eb2325a7832f2b74ff3444d7e674becaa" name="avahi-ui-gtk3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="19.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 0.8-13" date="1654948800">- DESC:avahi.rpm no longer providers avahi-autoiod.rpm</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
</package>
<package pkgid="4e5ecb0c50caf9f2f3f7aeb6a7cb4aa9f43c271b0bee480e64231911b927f47a" name="avahi-ui-gtk3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="20.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-14" date="1671537600">- add BuildRequires make</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-15" date="1679918400">- add build_cross to avoid install packages and files in self-build</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.8-16" date="1681300800">- fix CVE-2023-1981</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
</package>
<package pkgid="6d2408299374eb45a59d5cf91eff39dc9cf52a3d1d04c4ebd7f812b299651d6b" name="batik" arch="noarch">
  <version epoch="0" ver="1.10" rel="7.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.10-5" date="1615464000">- fix CVE-2020-11987</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 1.10-6" date="1617192000">- Remove unneeded rhino and jai_imageio in classpath</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
</package>
<package pkgid="97d810b29882b1fa8cb5c2ae1368f6f5fef6366f7200ef24b8c946668514f8eb" name="batik" arch="noarch">
  <version epoch="0" ver="1.17" rel="1.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.10-8" date="1675425600">- Add install require java-1.8.0-openjdk</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.17-1" date="1694088000">- Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730</changelog>
</package>
<package pkgid="2a61c3a29b4ce7c19f6828b7f2237a20605e3db3f8dd17d1483570603fb0ea9e" name="batik-help" arch="noarch">
  <version epoch="0" ver="1.10" rel="7.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.10-5" date="1615464000">- fix CVE-2020-11987</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 1.10-6" date="1617192000">- Remove unneeded rhino and jai_imageio in classpath</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
</package>
<package pkgid="f873e35ff610f5f700f51c836e0d829b8ee92396060eb704bb0a504515f87737" name="batik-help" arch="noarch">
  <version epoch="0" ver="1.17" rel="1.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1.10-7" date="1672228800">- Fix CVE-2022-41704 and CVE-2022-42890</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.10-8" date="1675425600">- Add install require java-1.8.0-openjdk</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.17-1" date="1694088000">- Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730</changelog>
</package>
<package pkgid="14f63aff6325366a7429ad1602d033714711c295c065babddce0b279e970e2f5" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="b3c4f70df6dd585acce74f3681640a76d2e6f338730f169e5f6b7dd6bf42992c" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="16f96b68cbeea79ceae0bc2e3f8bc7c01065c2d409383b6515dc2fc495675df5" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="7313b9de0dadedef663107eb2842ddb37b7bc0efe15f7d381f11bd0d2027ad6c" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="e258f44af443ab0fce6a0a52c9330115ff30a06b99ca1bf64b3c1fc62259e8c2" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="0bd92c84b0146e7ce084705ab498d76577670f4e01f88c2de49f69031f34b15e" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="b4799309184f3e85290e3a49dbd7a2ee72a1fe8bc51c9429acdfc1aed35eb2a9" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="3cd409e3745a63dd2a2adc610d3e4c6ce7d1a5f20be1a36e1c888b9f35bb7b66" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="f75d351bdfebbaf239a7529ebe95f2e04c45bb1ee472ae2c3487102badcb953b" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="e1271fc81b60a37e28f4540e03d329575367d0616a56bfa58067e8b809a59d4b" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="9dcd3fb5dffe0b8856c54d97c6d96f672de6bcfd503f4e5a37d8b77e1b06f6a9" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="5c381c05e3ee1e21b44010d605b7c290a73a4c48ad15905a87d6cbb9dbdc8c5e" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="eeb80c346defc6620ea0064e4d07c584dd959e3dcdb97d0030719399b0de14a4" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="813b44ac084ff220965577dcb7e862a2a21a10708efe6c6e2e1990f95c8432bc" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="852807064aa3d1102df8c10c258fe82caa42faa45caad430d84137fc1d9e2c2f" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="f6d9ebb02c3e7c5e99979a3b41030a79d6ba2159f8b05f0478415156739dad41" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="2ae1dccfa1508087f0edc69706882152907b07fc99ddf7b203faa07b72f763c5" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="fbc7b81d699eccd2b88c9dbaab44ed0e9f7bf41701e3df0bfb5805abe5691773" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="3e07e05331b01c8c9a8b78cda33bebfa3d9a62aee87df7932a61028e8df24927" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="db298cedee893733f2f8e72ce75c86f2040c5f560a255900dac9588ff552319c" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="f85c963d0e1c2ab346c51113b5cd46ade853a416f7e520090e538b4f477e0895" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="096e4dc635a5dacb83aa45a8c701f4359542dd315b57619ac218ef2ba997775b" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="1766c96c06dc9e076ed1b74144014a77ae3c3737be341afc8e931290e532d3b3" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="f457649e9363a662bab80503516ea0904ff2a61f46e4e6cc3801dc0ad2d9e7a4" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="dc4b14d499f04a5389eb44af004b508cc52e64cbc26c13ea276b267694acb65f" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="d060049c191dc7d2fefc8e9cdb512c0dc8d09b71cc140e396aa6fd2b2adac3b6" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="d4826adcf23b23432ee790028da6bacff6706a3bcf9070fbd536789085b8ed97" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="b63db32ffab13787adedd06ee59103faacdce17b5b7aeba4b52c3e97b792359a" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="b3c10d3af02bf7fa1079a4cf57ca4e62bb67ed13bf319ef65562b266fc9c7aef" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="f0a6b3c702bc16a5d0d8140bfdda8cf506d7c16ab34b001465d6e2ef6a798db8" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="fca4dcceab018f4bdb161e87792d2cd288396e1231445ec0ebf8be1b8153a1a6" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="1579ce257cf24070044d688e27f0292060e6093006d2e2dc53928d365b9d7202" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="486024ddd3339049d18f0a40210cc07858ceeaca0460d030a1c38af1b85ccf4b" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="e6acf704c7632180e148fc4b2425dc64c58792ce33b67da8e260da3a219fa7b7" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="247b1d7a0bfb71d1b0c6bfa4b4075df5a2cd9528fd0b93de097f5dc6124ba946" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="81d24f5b5d6b58273eb67691339ba4ed146c03c4b1ce298d195fa5d4d7ede0b9" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="2b7648f310e3f72d0b843ec1a4a9bee0061fbb8993aa70dcf342d24b3ed10473" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="ad028620eb48b6507ddac470d365ec0f859de6f5a0fc15ebcb1a2bd5b8f45ad3" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="69497b782debc15367d2562e230b58932bc3db097f6440898cb20066c6c75dcb" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="c29cc90ee666c2359a2279244ccaa23cb502a10791061272dbe1e5a4f51b76db" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="268e27a9b3c7970aac8b4c17dd663e760bec2ed4e3fdf489561f90637ea5b805" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="e617b8122e44961952657e8e4324031c4f19aaf3f7752a18f00ec968e2b9f4c8" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="d5327ee88de04d8f825507ec5c5edbcc3226f3e10ec8262470f56def2547d619" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="ddc0f1f0b3cd082a006d10d4c24ceedfe6bb75ec8da3b37d1a934cbf3b483f43" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="75166d2bea7e1d56c00b6d8edf5941d1e80ce37cf6c4aa6bf94f6da50a2a981c" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="35e12763875bdef150231736573354d7126500296df29857ded80ff00d956a46" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="c3303b2a0dc5dba5c2dd15e5645730c8e24fef8c0304ed7217ac000ab45e05b2" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="694f82420bb4112c290fdade4a77b2fa9cc4a3d75e0593646d7ad8ddc23cd2a0" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="62d8637c3c60db5e7ce8a6e61b23fd11f89104edab11a49a7e418433b5b959d3" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="d62c7404b36b98538d89b2c802e913efb50aadded5bbdbb81570bb67a45fd486" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="f380978085bbd434686d2c912bf086019b6048bd92f84c898ebeb67e7d2b7d3e" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="2d0dac8c324fd35452d489c58b0be45115787073422345506ca275729c902de1" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="8d4b1797db345ca58acf6c5a2b4125982d5a16c0a60bed7dbd15b76990c220b8" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="6e168d297fd3f5fab61f0648cfe8dfc8085c746d4ab73cedefe5d5cb362ad094" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="f121a176172161d399b6b002023ca9e382a07c092805f8a5f6954f2af6db73db" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="0dd308046e977399c5bd784a6aa2e4ec5c4bedc1518899cde367d6ff27b7e828" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="a3014a7f7a081ed258a07b4b266d1baf6ce917847d74a5183a1b826a18d33aed" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="530531e3d09b87b60751dd908c1796673580fdce3fc6756cc971b7d6b569d331" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="23c27af81b9bdeb332a15d7d53110569ee5ef1ffd41d94fd853a9a225ef6ece6" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="ee8840863512bcd42a3f501508d1eae4eacaa7250b043936833cfeb922e78f7c" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="72c0d4fca0e9d6e22bdf8155244f56f282dbad377079199a1f61a1de32836784" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="d3438f7fbfbc70a3558522977bc5a66a40b0448f6a1a046db2a278b110dfd57c" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="5e856192d2175e095780b825e7d78074b90ee68c0dceb1bf49ccdca77c5b6301" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="c486c7788cc05e83989ae3f30f25f08cd66dd39a92e0a83198f1a63cc740c670" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="af22eb69961cd69bc04bffbc6f235dc2770dd3ecf8b8c19229349a8d095cd93f" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="6ad3dbb0b213407d6450d1b4c5132fe2454d5dd1779016b9e7a79bbc3c914699" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="15.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-6" date="1644408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:limit number of test threads to reduce test execution time</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-7" date="1648641600">- Type:CVE
- CVE:CVE-2022-0396
- SUG:NA
- DESC:fix CVE-2022-0396</changelog>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 9.16.23-8" date="1649678400">- Type:CVE
- CVE:CVE-2021-25220
- SUG:NA
- DESC:fix CVE-2021-25220</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
</package>
<package pkgid="e0731f03a2c75b4a8a76a9de329f89773e862c8ac4481b084f4e1e0dbdaafb3b" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="18.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 32:9.16.23-9" date="1661947200">- DESC: fix downgrade bind-utils conflict bind-dnssec-doc</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-10" date="1664366400">- DESC:fix CVE-2022-2881 CVE-2022-2906 CVE-2022-2795 CVE-2022-38177 CVE-2022-38178
CVE-2022-3080</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
</package>
<package pkgid="d1e10fd8214b919a645774dd017874663bd3edc35cef67cb8c5219885bd73915" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="20.oe2203sp1"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 32:9.16.23-11" date="1664452800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix catalog zone reconfiguration crash
Improve the logging on failed TCP accept
Separate the locked parts of dns_zone_catz_enable-di
Check if key-metadata is modified before writing
Fix CID-352776 Concurrent data access violations
Require valid key for dst_key functions</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
</package>
<package pkgid="3419cabc19c6e3ba58d93a153be2064ca4cdb19addc776ef34b0a29173ec09f2" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="21.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-12" date="1669464000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-13" date="1672833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
</package>
<package pkgid="75aeb8aeaa113e6ea64e81d8a6315c731e34c748f129667d94837d07e1fff791" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="1361786c8a1be5d4f145c9611095e3c4b881b9a7592e4e3fa517037186a52d0f" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="5b243dced914779242c9ac410d35f21b7f55e7d7ad58cac08d866714ecdb03ca" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="735d3b86b1ee390163e52cefa5d721dccc58cb9f0e785a4ed634aff93ce83b82" name="binutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="260557d64fc1011f663cbd48ad4a6d77280eb901d56ff370ae32b63fd2d6aa5b" name="binutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="59330080f4d7e805ff9dc486286804c470545c3dd9a4badccfd30d10a49d5f91" name="binutils-debugsource" arch="aarch64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="8e48047d07c4fb1f561dc0386a9c3eccebe6de37e0c84c839bcc45b2ffae838e" name="binutils-debugsource" arch="aarch64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="23ec87f4e4f5bf38705dc0a5a21661d103ac67f82b646c8a1521cff862f63882" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="2b225eb5d7611d982397d04986322e5126f29959bf67daa4311b754fc296433d" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="222548fcd7f984f689a9f1cbe5086d7ccb92a841eeadc370dad83af9c8cbbf6f" name="binutils-help" arch="aarch64">
  <version epoch="0" ver="2.37" rel="19.oe2203sp1"/>
  <changelog author="Wei, Qiang &lt;qiang.wei@suse.com&gt; - 2.37-11" date="1662120000">- Fix man page empty issue</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 2.37-12" date="1665230400">- Fix Aarch64 EFI PE section address overlap issue.</changelog>
  <changelog author="konglidong &lt;konglidong@uniontech.com&gt; - 2.37-13" date="1666094400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
</package>
<package pkgid="0826744aa09ba0e7daf7fa8d80f57eb207eabc7a6e2253c60cd7e9be9ce913c5" name="binutils-help" arch="aarch64">
  <version epoch="0" ver="2.37" rel="23.oe2203sp1"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-14" date="1666612800">- DESC:Prevents the use of null pointers and sets the pointer to null after being used.</changelog>
  <changelog author="dingguangya &lt;dingguangya1@huawei.com&gt; - 2.37-15" date="1681992000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix gold linker relocation offset</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-16" date="1692792000">- fix CVE-2022-47008</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-17" date="1692878400">- fix CVE-2022-47011</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-18" date="1693137600">- fix CVE-2022-47696</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-19" date="1693310400">- fix CVE-2021-46174</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-20" date="1693396800">- fix CVE-2023-1972</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
</package>
<package pkgid="a7f1982fc76d426c4b9c99049271ffc28df337966391c01f8851514f39d4b9eb" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="2c6baea13d9e7ac18e4b141ede585eb5457868bdd8a10aa0456209e1436487e6" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="8a87f65b381ac1dace5b26793d109f1549bd387caafe017c0be5e98908472ab9" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="a53cde2b7d96841f397b36db976efdfa05e5cc33d87a1dd1e093d5edb626d469" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="4e92d9183fe27a166b1615f15f5e8171bcb7a3204a680a87c86ac4d5c4411b29" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="140f4eda124ae8f4956f3194eec9ba4c1cf56ed36af61235311737cdac809e8c" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="031da03e198c9f057421b5168e46aa437b41f23a0d98cde7505a26016f827caf" name="bluez-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="db22326efafb6f273d12ef065614b46e8a029e98b85a9882c4143d21adb2cc6d" name="bluez-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="2c5fb728daa8df5e1fc1cfe3e23a47d19cb10f9e6a4e5d0826a281657ff30807" name="bluez-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="6fa671c40b5f5656b9c6f3a37e26008892e4de44ab18cb6d6988d2ed7dde2203" name="bluez-debugsource" arch="aarch64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="981be8cc753dce83be4490ec0bbf502d4d3ecebdf167598fd2641695cfc012f0" name="bluez-debugsource" arch="aarch64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="99d91d2b2d246a949d6fd4c75412069c0b857d94880f84f9a8485db4d60e66dc" name="bluez-debugsource" arch="aarch64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="2dcd73712eb3557786998cddd9dd891d8df2c056be931c01eda98fe4b6381e54" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="5bab339c72b42ae984a1e8d163abf1b813bc8e4e78fe6b360cc02960b873e386" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="c2afdc9081a18750883c87d35cf51ff5a47316882373096eae5980eea8fa846a" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="3f55b8d2865648bcb2ee81ed4498f8898402c95770cd402ef69e78aa11e5a5d5" name="bluez-help" arch="noarch">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="8da733fbd65c60fba2aa00017e9ce4308cf45e01eae562b2d22a7f11c38dc5a5" name="bluez-help" arch="noarch">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="997be55b3fa930787f9b8fdaad49f50beb9391c9e18070238190fdcc7a1c1035" name="bluez-help" arch="noarch">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="db287c7434af6222e0d1669c939a17bc7c2025e9d60f7f805b29798b83bcfe42" name="bluez-libs" arch="aarch64">
  <version epoch="0" ver="5.54" rel="17.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
</package>
<package pkgid="efd927524ff656d3a00dbbbbba067f78b3ee9bcfab63afaf9ab00cba07d47a0f" name="bluez-libs" arch="aarch64">
  <version epoch="0" ver="5.54" rel="18.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
</package>
<package pkgid="5ef5f365a8a770779316d631a904a2d4df0aabc796ee6073a903603c451f47d9" name="bluez-libs" arch="aarch64">
  <version epoch="0" ver="5.54" rel="19.oe2203sp1"/>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-11" date="1644667200">- Type:CVE
- CVE:CVE-2021-43400
- SUG:NA
- DESC:fix CVE-2021-43400</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-12" date="1646136000">- Type:CVE
- CVE:CVE-2021-0129
- SUG:NA
- DESC:fix CVE-2021-0129</changelog>
  <changelog author="xingxing &lt;xingxing9@h-partners.com&gt; - 5.54-13" date="1647604800">- Type:CVE
- CVE:CVE-2022-0204
- SUG:NA
- DESC:fix CVE-2022-0204 and add prefix for CVE-2021-0129</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-14" date="1657713600">- DESC:fix CVE-2021-41229</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 5.54-15" date="1662552000">- DESC:fix CVE-2022-39176,CVE-2022-39177</changelog>
  <changelog author="zhangzhixin &lt;zhixin.zhang@i-soft.com.cn&gt; - 5.54-16" date="1670500800">- add sw64 patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-17" date="1681819200">- DESC:fix CVE-2023-27349</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-18" date="1702036800">- fix CVE-2023-45866</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 5.54-19" date="1703246400">- fix CVE-2023-50229,CVE-2023-50230</changelog>
</package>
<package pkgid="bee901a6ec97b5bf0c3ad4fbeb94e9446edaa53e1455b70d2766ee8052e405ca" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.67" rel="2.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 1.61-5" date="1627732800">- fix CVE-2020-15522</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.67-1" date="1669377600">- Update to 1.67</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; - 1.67-2" date="1687694400">- fix cve CVE-2023-33201</changelog>
</package>
<package pkgid="559f5f2b9fec4427f62cac74cfaacf9a732cc9ed6c888f1a07118e2e3203ada9" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="4951c3097dac970fcda0e833784d1f767a0829dd3a5c9cd79edfda6dd4d8bff2" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="933b38039d885a5932a80352aadee33e08792ce81c3bfca980543b19fc3fc311" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="c4fdc3f05dc5257f815f78936dd128f16b3725120e20ba743aec563239b492a0" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="44f48382f6b761d5509eb85b696c5fa50647e023e452dbdd6b8cd32da32edeaf" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="391df5cc2089e0526ad240d3ab5f8a98c381eaa713ce5c75acdb3c998bd272ee" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="61a303f5f4d6d75a9b8b36288add4573c49b8f30d987462b0c6db4e8ca0edaa1" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="b81d3876adab9053b94a44745294fc1e48c6b2738807c53c7388c9b0376a993b" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="0bfd399dd2cc7c2dda60e871f8d1f9843b755b6c34bb968b5792a08f52864f3f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="466a21d3d784c2a43fe353ac2227ba3fedf15e7781c3d6969fdab094d9adf7a0" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="6f0d524d70969042a380c2e75f91dcced430be18a12823e2d58711ef48c6f084" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="68aff301ad566e08345146f3dddef6b349a53710da9e3b4e862c4b4b39c5db3c" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="feb41de7cf2510ba2bf2ee791cb87f7be0923c46dd128da1ea21868e879e7f22" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="f3c8970f1297390899c7003387c4ce25bcb0b9d61d65e7c58f9e7706c93ceee4" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="e73682d1e290506164f589d0b0c6442cea1474d23dc8e93f4f9341b175e82d63" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="aaa661c199e8dd674c354939a017c0c0a0f71cb9c31316abcceb4a3b3ec8b3e0" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="c3ea0ebb543c7d8e635bbd6902e938a9f8d91e84a74b756b555a9d3c72e32801" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="ef53b421cca1cdae9be7f61ac31fd904dcc617d407c2520cc054ef136cb8b0f2" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="e457446355d342a75e5ddc2f85777b07616d907cfe66633bc0f7b0712e898bd8" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="3529f45f4fba207dc03c2b4d758d357ea94ba6e18f2bb76758c3b60eda02b121" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="fbdcc41f0391c2f65d687d5a5e57eaabdd1288b7eeccce19be204f6d5f8cffad" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="3fe17e5714c4e6587da4c734c4b29cc768b9346f056b03a46b14ea246f7482c1" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="292c2d227f9e351d3c03fd2c7a5d22930540ebb5e76bcbea709f91572c3ad9e9" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="45aa4547ff53a4bb6a48a34d95ae91c3effe50b19fdb2b495b1d1530aaa0ccc4" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="55c848a437488dc84717e3b9eac21e1bed28ceba035075a048b9ec00ed381580" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="49300d8c50e2505c46dbdcb7d627258f5c9c8a6ee9d302768e51f56c0c1f084a" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="5c79eb8b7cf1310d0a00fd211f82ab6553cb7dd757a8aeb9ea6c10375e4d2e71" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="a19ba2e0aef188fe711dd815ecb8feb167fe073f00797acb8d6d046f6d085129" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="c0f0bb22ee5ebf1b88ad85506d0c18a5f6a5187a5484be54a467517bd1ce1034" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="b0694b4c96328fd6e3cce317eb10d66b9db1830d58c59554f9c04312a911de13" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="de7a0f8115237c5cd9a5695a0a057ce68a36b71890ec49a026ca79f60db7647f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="75e4226f185d24671c4c805eb3e1062bfe7f8efd34914df7c7b5f3573e266adf" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="3131b083359f3371982206fece2348d3b747cf9e8d916f1f2311098d44e3ae9f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="047c9273a3f0b0d5c11a0303fe2dc2d1cba74d9792e1df2e637f3b3729fced1f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="f4ef9a6174b05d0d07d9d210c224a6cda3abb0ce574a15b476fa684d03c60131" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="199b39526390554fb1a908db629f343e630a81249dc275eb979e830d51502c91" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="587406bbe929d112fa3b002253b60eb8140cc0d7dcb4793060a59c82f8b73eaf" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="5156e2caf3086c12d2d79705c813c93cab290b48ecf32f4dd14917aa9b6f870e" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="13b2cab35b4be312cb614c9f83d152620f62e85dc82741962e01f4cb7e9c2874" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="b4c198b5bae0621e3217cb100c730c3f06dd2d6d7181e0c280c1c1c55c71fff4" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="9304f8244377e0695ae8a4e1ff018b81a1423b5232a95e234fe13f73ab294d37" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="cc4e22695f8ed88f452014ab9ce49dde7c05fd3079c1b8ce6dfde52ee9daefea" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="2778849afec36e27763e06dfe732bd285e337baad3d6cd6b9c79aef4cb449cc5" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="65aad0fb764d2968df49c0aa580f37c323c6d481f2ad5f4481792ba78f888321" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="36e958b616fc5b47b7a9c6b0b7c42a98d3b73808936ca84c901d2d7f9835ce1c" name="bpftool" arch="aarch64">
  <version epoch="0" ver="6.8.0" rel="2.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-1" date="1700568000">- Init package</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-2" date="1702468800">- Combine main package and subpackage. Keep consistent with the previous version.</changelog>
</package>
<package pkgid="1269f7d88c5cb267a5530abfb10e9e17df25fd04c0e5fb6995efded345548f86" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="17fd26305de6da1547865740e68c9dbc036340298b01409222a4734f1903c018" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="bcb0c60f1bdeacf252bd63320420461af8d2dae50eb6a653fd94e5358784d8d2" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="2b7a7583d00d85a5ac5fa3ac3a597347177a619284986e3df1ccf0a98c54e369" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="17bbfa80599ee5730155640e9dff5d0bfc3bdca1a91a1023eb3aa86bb0d515d6" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="af83780f53c68d9621da2aac5a6161f6fbe452a3441facad4d0098756dd489b6" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="9c94ca3abc69a804ccb6423a0b54ef10f799c2982948534ffc90d02f4503f7d0" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="1119f964ca6e257a0605561c36bf90eb6756a2583cb46e59f28c170b074477d2" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="80e59a7aebb0bae8a0271d262015f541df96ed3ff3d77f16e960fc8bb2cb6e51" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="2848c7b2b22b7f0cf9d3da22d86d2e481ac4fe432d1eb77497134f98b1953e5f" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="a647ce98a6ba16aff8cb6ffa97f5448e8041a31ba600b6f4fe60d388f3733c93" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="6ddc18d60f50497d17b299cc1d779042c1f552a03a801d8c87d35495469c68cc" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="83b6a54a98137dbd18767a659fe2b6aaebebda7c45e733def758c1e307340c4b" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="2524339b9365576ce083e2b153b71d93b953b18b879c9907cd7bb08433e320a7" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="0440e041aec0f89694803c20c6af65ffb20325a3d86b9c7a3b90581b7647c215" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="b43ef34aa207c3f2e592abe8454ac75241fbfbaf38fb71a70a05dae6973faab9" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="24feaf25cf10e61db1376727fe81016fbfd5631402f454fb52040bf7688c7e15" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="981543f8b50ce6588adcfc02bcd195ebc6c3ab7d24083fa7bd8f08b00b05d203" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="cc928be5b1ef49d5a38788d655236c9e8af65aa22b9ece5bc39e5c75e1daa4a6" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="ce01b7ebc2aaae7c783e189d98fd445cb94379bb1a7825098580d281dae80e92" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="1d9063d17135b129f561d4b248e7b955f59d5a0f69502ab8ef8303a8724b48b5" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="2e58f1ae4e5a69ecff07597638def3cf01682664b142aca5868057dd3863dda0" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="7deb2441ec23d77fe978cfff37a7deded9fad1a0f0d4ad81f6bb8dcba2689da4" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="ccb809c476ee6c3a38540f40d3353326677effc73c5615625512f3d509202403" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="73b45eb2b919aa2617c294547a9f0a0a3859ddd8dbac8c9c621c2b9a477909f5" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="35bc2bba41cb560bb9c03960b75dcd0a20839b1b55b1db9afd2b093987870188" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="2493c089822a4068492c9dc6fc7bafdd581586612645360daef81b674f673acc" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="580bed1f0acb3c4a9b60d1dcaca3bc5f7f9b4e19ffbfc5ededb21d08bd6f3e9f" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="b45d0f0cf881664d02b96c5c75f62bc259d5f48182c8cb7ac048b84ea9f43768" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="3ec94afc90c33e272aa9c9b178e810ca89126bac2fc17f6f5f090150cbc68510" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="b834ef8f711871fffd40bbb370d6627b886fdc692b081edc619c2414ffd4c41d" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="2c149f547346d560f3dae1ba921441300ce0f32ed35cc91225f26810e942e28a" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="5ea986838ddad0d2c09096dd72891583bda8b588a73f0a17c351ba0b34ccf8a0" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="3dd18dfc08555d6f7ea9b7235924238369b9533dff48261fa7f2519c06fda65d" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="bb4e21b510f837d6df1adb9ed8411e550d48a1786e2eaf0ad6158981d690cee6" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="46757a584bd56afb2162405d9efb27c17a71ed510583faa7666cb2f9769d506b" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="1821b999ed7caebbd0893ba3dbeb0bf5f209361c9fe29bcaed0759657ddb0d7f" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="11bf40a553fc9b2cd4da73b30599bb312e57f5619d8c856621a2ce4d86965d2d" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="f0d7c3073a01a9ddcce49f5a19fd92e240379aaee34530c01be299f3a1595d59" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="da0ca84ab3d9192de523bb4c387bb75f526960760fa3cbec0dce72b98647a7d2" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="91da229a8c9dcad7853578ecc26b4a55f6ca5f6e4814496b1160dd892466c822" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="516738db41428e6784a8668aaba5b4ca0e630d7eb280fb189954e4064280e63e" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="82a316d4f3d7c3e4354037beccf0694e6cd1793fc53b914475de9c83ec463ac9" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="3d23586264011436d2350b7593ee48c26071b8946ff114e70fbedd4e588fa4cf" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="1681f3f36cf8d0d9b649618cc541c6bf73d188ea271ca11ee737a8450396d587" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.8.0" rel="2.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-1" date="1700568000">- Init package</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-2" date="1702468800">- Combine main package and subpackage. Keep consistent with the previous version.</changelog>
</package>
<package pkgid="c928050dbb44313bd9cb11fcbeb424a7b43fdffd3a786b47ac14c152c407f9cc" name="bpftool-debugsource" arch="aarch64">
  <version epoch="0" ver="6.8.0" rel="2.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-1" date="1700568000">- Init package</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 6.8.0-2" date="1702468800">- Combine main package and subpackage. Keep consistent with the previous version.</changelog>
</package>
<package pkgid="c0e5d5a736ad712271a0d9add53810f74980ec5a03981d66ecb0cb4ef554a970" name="bsdcat" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="576d78c95cedebabf3736cf1794e6768a75c7dddb7bf21303becdd32999f552a" name="bsdcat" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="0de2dcab299bd3ce0a96da8852f223008b5404e99e2fcbb35991744a8f73de91" name="bsdcpio" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="c55f0e12f1adf40d03df1cebbb385781cafdb7ea91cc9e52255d35d20d9d6833" name="bsdcpio" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="57f1cff3c598b4736ece6908a89df325391a9568d3376d8068be797af78c57c8" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="5b172dade70f5b51b373b64aeeba8a2370e4b29510274f23924af01e58d2c14b" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="67d6aa53b759b40995401687cecf3b0f5eaab962857eb9af58019cc30f195ebe" name="bubblewrap" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="a7d52fd9ff63ebda6fe4ee08b015035a6ec8550b7b97c7968a1816c87c7aa603" name="bubblewrap-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="2913813e40c3d45e2173694d0f778efe8e8af26ab0abab09a750627358ca1e8e" name="bubblewrap-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="311d2f2c1ad0f6ebcc3bdaa59c84397679d16af3698b7f4e43d870175742bc7b" name="bubblewrap-help" arch="noarch">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="b81c41847b653ef47351a831150ad80041074a02b4aa08ae6a2a4921757aa37f" name="busybox" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="85935571c00e1f9c84e13b5b4ed1c25f1b8cf2154dcdadab975860989b2b1eb6" name="busybox" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="20.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
</package>
<package pkgid="82411f5c565ae110235723e6b62968fde58699cbced4cef4b36808e7eb703c6d" name="busybox-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="88926e35a5639ffa5bb7cf272e1f7794b323c6b10515bf367dc795d502c6c83a" name="busybox-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="20.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
</package>
<package pkgid="5407a5e320ddc81c19a02b441ef9966e3d6fcdabcdc938c4f51be6a29f99d15d" name="busybox-debugsource" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="a816cd2e237563db49181fb6d6ecf9216a77a90ab09bb5f00276b17345cce6ba" name="busybox-debugsource" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="20.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
</package>
<package pkgid="c8f20878208ccadee89ffa408a197d2cd701f98bc235f19159b379b533be9778" name="busybox-help" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="b270799a6eab41bd0dbc1f5aec729a0aacb5312e8d3e94518ca33e5b4bfbb23f" name="busybox-help" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="20.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
</package>
<package pkgid="8c724571c416625b4dcea0902d96156d92328040f63f7a1b57884c8344b7cf1c" name="busybox-petitboot" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="19.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.33.1-10" date="1637582400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42374 and CVE-2021-42377</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-11" date="1637755200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42373 CVE-2021-42375 and CVE-2021-42376</changelog>
  <changelog author="xiechengliang &lt;xiechengliang1@huawei.com&gt; - 1:1.33.1-12" date="1637841600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-13" date="1638187200">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:update busybox to 1.34.1</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-14" date="1650369600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-28391</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-15" date="1651752000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add epoch field in spec file</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
</package>
<package pkgid="2935c3cc3ae19a63d6e4d3dc8a01559fb9ad33d6dc5a911f323cd43db0add12c" name="busybox-petitboot" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="20.oe2203sp1"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
</package>
<package pkgid="0e07106694bea13601ec82cc4d7491ce987d6b9ef4ad661cc6c3dc90b4338f4e" name="byacc" arch="aarch64">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="b571802095695ab465705a6cf09a2d47db60b0ab7413235166b3456662013a6b" name="byacc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="fd6e2beae957ba2a23a658af838164acdc09a4c56140885b8ffef360008bf32f" name="byacc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="ed2442b4627f9edb141c3b0890495938c24e2466d817ffff3eebbcaf32482cfe" name="byacc-help" arch="noarch">
  <version epoch="0" ver="2.0.20210808" rel="4.oe2203sp1"/>
  <changelog author="wangjie&lt;wangjie294@huawei.com&gt; - 2.0.20210109" date="1612180800">- DESC:upgrade 2.0.20210109</changelog>
  <changelog author="tianwei&lt;tianwei12@huawei.com&gt; - 2.0.20210808" date="1640433600">- DESC:upgrade to 2.0.20210808</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.0.20210808-2" date="1656504000">- DESC:enable check test suite</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.0.20210808-3" date="1669032000">- Modify invalid Source</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 2.0.20210808-4" date="1672056000">- fix CVE-2021-33641 and CVE-2021-33642</changelog>
</package>
<package pkgid="ca5c2efa3df6e0da46e95460361cd85bd6736ba2282d0e197e09836397cbf1fd" name="c-ares" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="e0b0f36f08ae5e4626d5fa0a004e1a83013205176bf814b620b4d8cf5fda587f" name="c-ares" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="36710914bbb3c6650a74da3881c620d1c71a3ac4c6072043ce84ac5ad3649042" name="c-ares" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="7fb02e36bbd8d4311061ccd2963f53d00f0e6e406cf97f489248067f73710114" name="c-ares" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="8.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 1.18.1-8" date="1709035200">- Type: CVE
- CVE: CVE-2024-25629
- SUG: NA
- DESC: fix CVE-2024-25629</changelog>
</package>
<package pkgid="018a0b69c278305f589363f9fec80aced6bb02efd280725db5e4f11b2e38a90a" name="c-ares-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="0ce94a6066040e9c33d0faa2c9aff3d77d6d782208a7701764686076dbb2bdc9" name="c-ares-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="e2bdbe55fc676ae82dd51ec0756c375227594e3af1e3b196ce49995dba74c8d4" name="c-ares-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="af77909dc633882a785a59851701667eadd3234eb7da66647e59207b62277d80" name="c-ares-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="8.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 1.18.1-8" date="1709035200">- Type: CVE
- CVE: CVE-2024-25629
- SUG: NA
- DESC: fix CVE-2024-25629</changelog>
</package>
<package pkgid="200f013f73542e21e3225c0848ac463955d8f53ca1857e9313bdd92e0a36800f" name="c-ares-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="4274ab8a19da6be17d4033191628e5c7930aac9614930725d260ab6c8461b114" name="c-ares-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="669f8a73b2777ffa6c9923c5e079d433fe98f378a1c785d56f6469d5a7f332ee" name="c-ares-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="44faf872d29803c0e255222d7a73b58e93abf8795827f599c976a32f57d1f76e" name="c-ares-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="8.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 1.18.1-8" date="1709035200">- Type: CVE
- CVE: CVE-2024-25629
- SUG: NA
- DESC: fix CVE-2024-25629</changelog>
</package>
<package pkgid="4a882b630b014b76c5b59f471f77bb865a1f1d43c5369d827d519b8c4feaf494" name="c-ares-devel" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="5aee05fe5f9f8c588f9c805707881e7c6e3391f52dd4ca23a89e0a7b4c294daf" name="c-ares-devel" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="c9442ea82175221f91e8380f9cbfcbaa4976ead9f303a9c677e8a511d03fbec1" name="c-ares-devel" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="e5caac484b6fcad83217a19ad1ca7b710094e4a5270c6afea929090ab9f9a29d" name="c-ares-devel" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="8.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 1.18.1-8" date="1709035200">- Type: CVE
- CVE: CVE-2024-25629
- SUG: NA
- DESC: fix CVE-2024-25629</changelog>
</package>
<package pkgid="1269122c889e0f54b50a87d8cf3425cc4233f1fc58fd872b3192638135d6b4f3" name="c-ares-help" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="4.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
</package>
<package pkgid="138514a631508f21a7ee1357f82e40c5e53aebe003220fd42cff082da6735003" name="c-ares-help" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
</package>
<package pkgid="05276241be2928a8fbb9b0bd14eed6d7caf40ba6822b00fda8be4af45eec9eeb" name="c-ares-help" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="7.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.17.1-2" date="1628769600">- fix CVE-2021-3672</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@huawei.com&gt; - 1.18.1-1" date="1638446400">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update c-ares to 1.18.1</changelog>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
</package>
<package pkgid="c81e5e3fd24aa9daa1c57e08fc098bf9849c0f01e6d94a73b5674b23cfd8fb2a" name="c-ares-help" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="8.oe2203sp1"/>
  <changelog author="quanhongfei &lt;quanhongfei@h-partners.com&gt; - 1.18.1-2" date="1650283200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add libcares.a to c-ares-devel</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.18.1-3" date="1654776000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.18.1-4" date="1676030400">- Type:cves
- CVE:CVE-2022-4904
- SUG:NA
- DESC:fix CVE-2022-4904</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.18.1-5" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete a static library file
       add BuildRequires make to fix build problem</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 1.18.1-6" date="1685275200">- Type:CVE
- CVE:CVE-2023-32067 CVE-2023-31130
- SUG:restart
- DESC:fix CVE-2023-32067 CVE-2023-31130</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.18.1-7" date="1685361600">- Type:CVE
- CVE:CVE-2023-31124 CVE-2023-31147
- SUG:NA
- DESC:fix CVE-2023-31124 CVE-2023-31147</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 1.18.1-8" date="1709035200">- Type: CVE
- CVE: CVE-2024-25629
- SUG: NA
- DESC: fix CVE-2024-25629</changelog>
</package>
<package pkgid="9f22fa91e7a0f9094706dc73f32c2d9a369f645d24004e898e0e6a4c6196df17" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2023.2.60" rel="1.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.46-2" date="1623326400">- Refresh the original the original certificate file and delete the insercure certificates</changelog>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.52-1" date="1638360000">- upgrade version to 2021.2.52</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2021.2.52-2" date="1666440000">- lagging install ca-legacy and update-ca-trust</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-1" date="1686052800">- upgrade version to 2023.2.60</changelog>
</package>
<package pkgid="a9284503a4b9f2c4b71dbba5990fa46a4395d3d93dfa25633eb9d8984bcb4374" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2023.2.60" rel="2.oe2203sp1"/>
  <changelog author="liudabo &lt;liudabo1@huawei.com&gt; - 2021.2.52-1" date="1638360000">- upgrade version to 2021.2.52</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2021.2.52-2" date="1666440000">- lagging install ca-legacy and update-ca-trust</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-1" date="1686052800">- upgrade version to 2023.2.60</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2023.2.60-2" date="1699272000">- delete the unsecure certificates</changelog>
</package>
<package pkgid="d62f08c60f08c2b2ef9ee9380656a0be24261c9f83938bfcb494b1fad8c4ac43" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="3.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="0726f83c48d540103728965c32f7b922c2ce16ac9bfa317721ee77a4f2952b40" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="4.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-4" date="1719489600">- Fix CVE-2022-36113,  CVE-2022-36114</changelog>
</package>
<package pkgid="2163e3c8e042f4d52b7a17fb933bf8b6cc78889060464bcf3e1ba5e3dcff51cb" name="cdrkit" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="fb21770f16b5b2cb97bc95a9e013a189df407ed5b8996ea05f727a6d60dd0440" name="cdrkit-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="5befaab332bd87612053dc4e43f766883f69a98ee61350f6ccf324f5868da049" name="cdrkit-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="035927a9b9379788e7b56fc05b7012806ea2475de7347874517747fe245012de" name="cdrkit-devel" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="3b48bf97e03742d2c40f38ff4bbd969ef81fc47e996b84c3d5a688d3c436ee01" name="ceph" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="2cbb4ffefb7d7ee2fe4685e93e4e5b2d08eb4062fd40deee863c6ac223ae028f" name="ceph" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="9cedfb6f64e0a69257e044a07faf674fd260cc97a46bfb124da5994f7fbe24cf" name="ceph" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="07d28d6f8993228a2722db046f868d0fbf4db72048f8d7b74988ad75d9c3793b" name="ceph-base" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="262da5c31732085c4d3c43b8843f98cd75443a5a16b7bf04aae0c87a59e19292" name="ceph-base" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="554e28851bbda9af6d30f00e22432c4ca33ab5f9dd0ff043b249dd8458a27e53" name="ceph-base" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="4b5b928575b891984c3b2de1d0016e5c44f7ececbafa7f3443451da411b89911" name="ceph-common" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="70a5577b0e8a001a5aa8e13a524c4a4c5d619a9dfc0bd1625fa91195fd8ea78e" name="ceph-common" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="93eb8d4591dde7974881324a97416b84766c337f8abc55ac301dab94bb160eea" name="ceph-common" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="41b8ad10894f0e7aa4437eb720a9be9714536bae726a3bd47a32ec37f814b4ff" name="ceph-debuginfo" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f87d1d5a3637e90255b0097387297726f3c49eaf3c1489a5e4a11dae33de9ab9" name="ceph-debuginfo" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="83f214526cd96c50aacf07c8338d9880813af27babc03ffc51057ad4c5ab681c" name="ceph-debuginfo" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="fff4f820dfce1d9b273c6d25d6d1d3eb63d171391f869dd0692efa3f2078c937" name="ceph-debugsource" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="42915b43d9882c8b6f9dd9f01988ee73c91a96caba5b08779f13b7ecca97d982" name="ceph-debugsource" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="27d11f6f0a4aaf86a2c1f6a579c165fdfe12483240eb6288029efe2bf26cc20a" name="ceph-debugsource" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="1c9787bb07d6ba93ec84b149f52dca96645e6d045f71b8c1de64c06a98c0b49d" name="ceph-fuse" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="c47f5605dd69b433550dcd15cb7d2a45acdc4908dcc8cff4d753156da8c8d498" name="ceph-fuse" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="a11c939af08fe090e239710ca23e8716cddd373fa6d136893bd8e73289c2424c" name="ceph-fuse" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="b4df3a71ecfa4ae7897c999d5355def3b2b187e6decf3a473440f44ceba8a1c8" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="762063f6a9ad576df88de8c99614af24758bdd429acb2e625575c3a8ccb1cc23" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="6bd03863f5e0edad2ef05da855907e3648b9c25649e372b2a6c35112dfb561bb" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="214632b89788031978f65437ca8b910cb648c6c7bb10bd75ce7169cc00815687" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="53ae55f1e32082c99f4b9c313ca874bf6b2318c4c903b155af643f2aaf9d687f" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="8eaa0515613d99cb4d40afb7874a56694b2f8bfe3bd1b0cf12e990d9ade5648d" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="93ca227bd766692f5a311ddd0c0714b5985ccd523faa58c2f24c094de54ccc1c" name="ceph-mds" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f9f34c9af8880de0814f707aad4b4877f8395ed1635d779ca8da8a5353ce7f00" name="ceph-mds" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="f2710480cbfa5a92534c051c64d41f1521dd2736a7fa7e8d1169d0f88a2dbae7" name="ceph-mds" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="405a323b21fb4081a29bc9592d097f5f0ae03061e88e48c74bdef303517664a5" name="ceph-mgr" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f54666de655e7464cbaac225dd24726163955855673c1094e96f7493fae5ed00" name="ceph-mgr" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="c7250e9ec78bf1658ac7d4bc3015a5467a1bfb05f4be9527141ff6a3f3d1c147" name="ceph-mgr" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="e4dd86be7684e7d90bf613649c56d61edc0babd43d039326407c05d0dd69e30e" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="e132ff7500b65e65f629092ac443e5554e11b1bbb3d70ef6302cc844f31fb9a8" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="7372be6e2852694fdbb7f7d3bce81e027c8020cb2e958dcba7981136607086ee" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="9c2cacb38c87317ba3a71603a504f48af6c8f2927988748ef0754c9d5eea4fc3" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="ee7231975f38e0ed1e2c74b7aed6410b12a1b3935318799059e0ac16d828c953" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="f3f99c03cfaf449c954ac5619d8b79755197dc65d1b27b22448b7f6ce9c647a6" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="610e57aec52e8130ad6bb4005c6abcc72e574ed21670bd3d1cf0d5ad40b2b524" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="a61157a683e1c5017f5c513cfaad9f7e7779eff593aefb87e8fedcc6c88d78d7" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="229cba2052923a36c332de38531cab5e46a629d8189dce8edc339b8c743cf0cc" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="59f5b775592701a572d5824037cfd0d3b1bc14361f4511c17f9a6c5f487dbbdd" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="fe20aa06037ed39e31950599fb5129f674f465bb7dd2a5443884abfb7a2c3b13" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="b223afa2b7b2bf834b557d1ffdc1a25ade386575785e7960012ac6fbdc8460bb" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="9f7e529dfcf7d8c18f5d855d9810ea319cddd64fa10d24b2994481734c0a06f8" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="36c335d60abab840f754a0310fb1d3898864de514c556079866e0be2dacb768e" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="9ed327ef463862443f819267eacf4c817111394f1922c6d9dccfb0adb3f3d024" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="b520fdd2bf8248a7438e9deeb4e78ac2a99cd2025b0ecffec250a9e0977c4267" name="ceph-mgr-rook" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f9fde0e3c41e4f125b3b03b5601a3e09edafe2c49fca49d2fe0da925160e6bb1" name="ceph-mgr-rook" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="41382ff24b875d6488bc2c78450582dc217d4ec2f6ae67de7ca85ef9b639b4e5" name="ceph-mgr-rook" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="04722c2a7ef34597bbf37482b307714cb2de7a8d663e3172f657417c5fd0f9c7" name="ceph-mon" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="34ed954b89cd4ad7e71f5a1f7c218ee982ba92efbb697cee06095f148eb4d246" name="ceph-mon" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="5bdb7b780e5624bcdf8253c916936601ee3b55b3d7adf5b1c82d60015bce8090" name="ceph-mon" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="02c1e521248f1ff95b0cfbb11d0c1cdc55ab58eb46a810d1d3f85991f1251db7" name="ceph-osd" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="6e0c45a1e9fbefefbf6612880a52fec7e31090ef74beeb6647c04483a9d2d4db" name="ceph-osd" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="a35ae5acbb5768a29bea6171bf8ae1883e2cb2876c872edb98e3a20d425b2287" name="ceph-osd" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="36270276d004e0a3bb63a2dbec30825f64276d3da4a60832bc42a68b780f315e" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="a2e5fe7077e368f263a40262dcef3635fad6a66c2e8592993e8fcc5f5c38153a" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="c848dd232055e8ce4a6aea6255bd284f3aaaab9bb0a4fb870c0348dfb74461c1" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="4e87ef17235cfbccef2e8ab3b1be8047b9ccd6004b676a4dbedb86c5a2c7a59c" name="ceph-radosgw" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="db83a07ce5128ea2d0ac81e65c45885c1071247b90832a0191960c0c51719259" name="ceph-radosgw" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="bfa42be1e320088ffe69f9b9164e4061719bd11be34724f428a731c9d8fae4bf" name="ceph-radosgw" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="810a0af78cf59b359228a7d4fc31fcbe3bfea6ece49ea408ec12c0ca08d9e338" name="ceph-resource-agents" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="c3f430ec7f3583b6f3719f244f97bcca3192daca12aa53360abbd809964885b4" name="ceph-resource-agents" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="6305631a05ecdf3b1d47a735a28ee1ce151b9fdbc74b6c8b202ea7d6d7f439a6" name="ceph-resource-agents" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="e5381b4aee2d800e7dd5f317958b3e95c1442fe461ba5fb16bf8144aa837da75" name="ceph-selinux" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="9ed43d95471f4ab726da3bc8e10b70e7e373e97a815b6157ee78e53e68bd3dc0" name="ceph-selinux" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="143d30ff41eb64da05336511bbeaf071a6e8da402e1b98a9994e2d4ed3baf68e" name="ceph-selinux" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="91ef822f36c57303fa6e0d87c39c0bd4fcb3c4c982df535c4b6d2fec10165973" name="ceph-test" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="1e016ac93bc1819bc1263c487f4f9c6f53d2f242e620c0dde486024884650ef3" name="ceph-test" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="cc8f6ae0ed6271da9129739824daa0495421ac03f4d71a2c0ba4c021e214360b" name="ceph-test" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="2fde9a98694151eb3024c53389605496497959f0cc43962a35825c558aa61c5d" name="cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="7e1afc1d544cc440d6bd3cf9b69724836707853c4b7d794e2e1c96eab8fb49ff" name="cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="3f01146df73b2ad6aca649ac46054dad7e61ac94eb4b68931d0a180d73505276" name="cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="eeb1e6b1d64b69556da706ce4ce57d8659fe60c2075134b75b358d80cd143d84" name="cephfs-mirror" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="56c0f23b1d4e9a03b557945aa74ec961fd1f8fe4e03691a844d12d783201d81a" name="cephfs-mirror" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="5ea3a681c3478f88d66d642594c3af1a48cb86558410b5ec2ad52b87d3278318" name="cephfs-mirror" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="45ed2dd6ca3f0462653a346922ffc9132a59b34da78bd19898dad88e974fd906" name="cephfs-top" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="cb0ad960effb3b07da92cb35e499c3085c014faf059a2673fbb16b0927ba4ca3" name="cephfs-top" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="a7fad95806d9152ac8f933eb705bbc0458298c7f5ea350cf207c010b1c0a4f25" name="cephfs-top" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="3e70e092a024a92033fdf83656f2dbcf1ee8dd4e855c908d79581eb3402f4bcf" name="cfitsio" arch="aarch64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="870ffbe18e389fcca81edb664400fae03a0980dc738b093d85c84e67b1c3dbd9" name="cfitsio-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="aa600056074ea8f21b680b45f2a8997d602dcbf3f266444bb0e1c7602238b208" name="cfitsio-debugsource" arch="aarch64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="bd2224ff9003283b07c2b163a9d589e2d8c0dbdba0b29dd8e5b2545e04f5778c" name="cfitsio-devel" arch="aarch64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="55fab4ca61c67f055e0c17f2ef5dfcd951f60036e22c8043afcf9086510b0c08" name="cfitsio-help" arch="noarch">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="f2850c4e96fe1dc889a0e4bb11ab7e2344594a81e784910611522b317a2e5944" name="chkconfig" arch="aarch64">
  <version epoch="0" ver="1.21" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="8ef0d8bd5e8706a7887b21d7d497305b6d11efa33b4e7c8aa2eeb5aa508c1866" name="chkconfig-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.21" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="aa838f7c908d101bbbbaba1a97b0eb22245edecbb81c852e949c88462e97529c" name="chkconfig-debugsource" arch="aarch64">
  <version epoch="0" ver="1.21" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="216fe2b2cd481cdac13042452daf827fd95c88aea854fd1e006c55e19def0e04" name="chkconfig-help" arch="noarch">
  <version epoch="0" ver="1.21" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="803451bc1527a891c564dce768773d8c1b5d9618cfc879ab4a535e40142855db" name="chrony" arch="aarch64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="239b155eedf9f360f2c44474832db7c87677ce385bb385e4543f5311ec4c3f1b" name="chrony-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="e13152de8e80963f205705d07fbedc1083d9a4322007be708b1b45311acbfa49" name="chrony-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="f9dfc9a4123c195a447bccda257b47cd61e86204a5d9f1654a2893ca7d280670" name="chrony-help" arch="noarch">
  <version epoch="0" ver="4.1" rel="6.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-2" date="1666094400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:client rework command and limit the length of command</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 4.1-3" date="1671796800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix chrony to synchronize system clock</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-4" date="1672228800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update the patching mode</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683374400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
</package>
<package pkgid="a9c86750521d6ac2058ebc66dab530b570085e448e2682632838c894193f1ba0" name="chrpath" arch="aarch64">
  <version epoch="0" ver="0.16" rel="14.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="6ee16d4a11187599bf5518b68ce5d9973ca9e4982cab06a59d7809dc9a5c7454" name="chrpath-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16" rel="14.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="742b711acb686bfa28e01c3a3bf60dd69073b851a42fafc11234479e47e4d307" name="chrpath-debugsource" arch="aarch64">
  <version epoch="0" ver="0.16" rel="14.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="59a37dc83be4ab3b793c1f47c3b18e2911eacde2136972f590947afc5db59885" name="chrpath-help" arch="noarch">
  <version epoch="0" ver="0.16" rel="14.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="bd93b2b937867017e48cb862290b964832889f4a156d521d3c672af9b2f333f4" name="cjose" arch="aarch64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="17fdb3025a001632a6c016ffb56ce78f2a0b058f5d706135fb13d998585a6999" name="cjose-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="790bdbd2a91f86ca849d9b4c35ad8152103a6e64d415a0040b89847795239836" name="cjose-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="328cc135db23d1480809089a50500e6b9484f614555921ef11a677a3987a076e" name="cjose-devel" arch="aarch64">
  <version epoch="0" ver="0.6.2.2" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.6.2.2-1" date="1690200000">- Update to 0.6.2.2 for fix CVE-2023-37464</changelog>
</package>
<package pkgid="3f598d8d763d88e0c43967a0e78ae3adab44ae2a2144ac1dad4403b7d4465271" name="cjson" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="5.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
</package>
<package pkgid="ed84b5847dc69a0c53a4fcefb967bfe89192d3c84c2994b5985d8a6cbc14668c" name="cjson-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="5.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
</package>
<package pkgid="2aecdd6727938b844cb109104f6b01cb20becbe2229e6dc914f1a549b64b4be7" name="cjson-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="5.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
</package>
<package pkgid="12581caf93223da1cf91fe2983129077f78f0bed00c71fc4fbb8287df2c2c7e5" name="cjson-devel" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="5.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
</package>
<package pkgid="03c7527bd04e22d1fc83c583790e69f8fbb82195f86fc2b8669840c14249f8cf" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="9c0d44023f48f4aa8a3e70f94e15054fe5f905944d73237244300121a6b703b6" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="eaa4720c80a593a1df8ad936051e589f445de9db6c571ca116edeb4e8416d8be" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="59b6f69512572504ff9b718867a0fa64ed6d0594b2dbe88cd12aefaf733dcfe7" name="clamav-data" arch="noarch">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="f39502f0648b20f47eb5f1ed55e3ab11599eb3b9010b3039bbac35ef72fe1063" name="clamav-data" arch="noarch">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="383476a9d8bb4c83bd5b9817c54d53ec0c358a9eab462a0a7d156f935c657df9" name="clamav-data" arch="noarch">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="9d089e745c809935faf6745e1639872230129bb9186b3958e9cfc7122cde0f60" name="clamav-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="6a5241788930c74cea213515bd5666273032bc0924bd1a1c3e2560be3ac66544" name="clamav-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="b7b2095b854ddae5a2c995c38771acefc72a982981bc422b31a66208cacada3f" name="clamav-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="21d0c97f26f41c957f7ad0ca6560f679e58d6dee613fa2af46d8ee0c3389d20a" name="clamav-debugsource" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="65300dd58e6c4cb0ef6c18314a52b40b433902c3c104e2382506ca203b13f019" name="clamav-debugsource" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="758ac70da6b7d64131985f523a1c4bc1d2c2923b7be3fc2a73ffb77453acd312" name="clamav-debugsource" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="8b4157baf8de8d8c5873618ad38ddf0a31d82564ea3e40c9c7ad14065cc1843d" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="cd5babc86a7f03c64a73155c78e86861f22b6b6019095deb56adc1898ba4c9d7" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="52d93665749ae19d54ef58094d38abab0525fafc793e17a294bdce1e9cf3c5da" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="637cdce8e320b4061777ae1252ee943a55a8ef1ab0302992cdcf1159a5fe73ef" name="clamav-filesystem" arch="noarch">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="07091954a394f640cb1d8a38bc5955f09299fa3c6df53d0abcf6f90eb99e2a07" name="clamav-filesystem" arch="noarch">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="70ceaefd87eec0dc4591cea36e0cda8d880e2d1f50c29f39c952eb515e0151dd" name="clamav-filesystem" arch="noarch">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="5c4ea689dd0b0a83808df6e5f10e71cf8bbaa33334bee643cd56e9f1959f8417" name="clamav-help" arch="noarch">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="2a28d81672906e699d47f69bbca315b1fc7b003bdea48cf36c7008b714309068" name="clamav-help" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="326858656fec7e245cdc877fc7b630e167e717e6d6bac68496dd4147ce7b6d64" name="clamav-help" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="10e3e6dadb4050a530eb9b4a56b24532b8424e31c42978c323d09142e6165a1b" name="clamav-milter" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="82a61afd97a806ea235a9437f25a667fce08ea8e98d573e2e72990e60a5831c4" name="clamav-milter" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="5e0c54c586799a17ef1cce84d26e49e002561b1e8df336746969455ca67a7716" name="clamav-milter" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="fdc9e1428f2ae2018e7a644ba87e253e95a73185e344a22acda134fb3fb07e70" name="clamav-update" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="52bf6167d0aa6cbe4d9913af5e7fd79f946661e87c88569b80be9970ea54cfed" name="clamav-update" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="5a89cbee2cffdd1f1fdcea1ee391da8c2e2388ba37a1e0e7a9d28c778f9e34b9" name="clamav-update" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="7ea6293e149d4911395015c26490ee0237f3dac66e3fc86a2f9529b4042966da" name="clamd" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="0fef168cae406671efa266d81221beb72a9eb1a81d01c4a265836f62695ae8ed" name="clamd" arch="aarch64">
  <version epoch="0" ver="0.103.8" rel="1.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 0.103.2-1" date="1618574400">- Upgrade to 0.103.2-1</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-2" date="1622548800">- fix left shift</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 0.103.2-3" date="1628510400">- fix clamonacc --version and --writer return value</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
</package>
<package pkgid="efd5ac9ca2eb05bed4564c2f7b92be6e5bccc38d07f397afe8c4ff888ab3b49b" name="clamd" arch="aarch64">
  <version epoch="0" ver="0.103.9" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 0.103.2-4" date="1643025600">- Fix CVE-2022-20698</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-1" date="1652443200">- Upgrade to 0.103.6
- Fix CVE-2022-20785 CVE-2022-20771 CVE-2022-20770 CVE-2022-20792</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 0.103.6-2" date="1653480000">- Fix start clamav-clamonacc-service</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.103.6-3" date="1653566400">- Fix the failure to execute the clambc command under the clamav package
- Fix clamonacc -w error</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
</package>
<package pkgid="3f28e65e6d99e4b66a6199fdcadf4bd7256896d38a5cf302b1dfcefdfc7651c3" name="clang" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="ee2b80f003e7c0f9dac355dd954c23f0b00d33be2f19784d5ffcc75b9c91da56" name="clang-analyzer" arch="noarch">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="2a7d0a33fa7f688babe9b3d8390a483bc6c4e300a43f231b1f9fed45fe8d7b6a" name="clang-debuginfo" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="6280d4504b82d4173d043a5372974fbe9e069447864c1a3e2428e0da354a081f" name="clang-debugsource" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="17b3502392920d32a3bdad1f1839d7036ec21e8c006b8ab87a8bebf07507f78c" name="clang-devel" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="0c00cbbc2eaa813258ee0fa82ed5b6d48039a14f763c5d271e2f74c8f70d1f54" name="clang-help" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="a908c37cc5ac3e129a66780fa1b734fd2a8261e89c7c3fd71bf4a8ff6c16529f" name="clang-resource-filesystem" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="b20075a4d87fd3fff8f9a85d4a3c449028c0a18db544553010f222425151ebac" name="clang-tools-extra" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="a9270ecbc192e37595496de9be4a494174be55a0ed633b5f18e8afae15f74c33" name="clibcni" arch="aarch64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="dc7ec45a825a1b09d21f1cddb32597b456cc2ba7bc7752d1646ee6e2f57bbf33" name="clibcni-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="3fa755c6534c16a84dd63e96da0dc7bdd9be5b2ef0988347fd696f12ea754dd5" name="clibcni-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="c3c4f538d4e2a3008af70759e62b5e240b810fd298d04771c3c19478eb521ec9" name="clibcni-devel" arch="aarch64">
  <version epoch="0" ver="2.0.7" rel="8.oe2203sp1"/>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-6" date="1641816000">- Type: adapt to new gmock
- ID: NA
- SUG: NA
- DESC: add gmock build requires</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.6-7" date="1641816001">- Type: sync patch from upstream
- ID: NA
- SUG: NA
- DESC: sync from openeuler</changelog>
  <changelog author="wangfengtu &lt;wangfengtu@huawei.com&gt; - 2.0.7-1" date="1645704000">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version v2.0.7</changelog>
  <changelog author="haozi007 &lt;liuhao27@huawei.com&gt; - 2.0.7-2" date="1654171200">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: remove rpath by cmake</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.7-3" date="1666094400">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: add required package lcr lower and upper version</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.7-4" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.7-5" date="1671624000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 2.0.7-6" date="1683892800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add loongarch64 architecture</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-7" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error and empty pointer reference</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.7-8" date="1695124800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:report low error of call cni plugin</changelog>
</package>
<package pkgid="bc2e83d8570894f46ec5b531c66e7b007418a22951d9b4e6b9bf1e9686a48370" name="clippy" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="3.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="9701b592ccda55698569039134043181f94288cee79d4f7cdb38f263a56eb308" name="clippy" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="4.oe2203sp1"/>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.57.0-2" date="1664193600">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;wangkai@h-partners.com&gt; - 1.60.0-1" date="1680609600">- Update to 1.60.0</changelog>
  <changelog author="yangxiaojuan &lt;yangxiaojuan@loongson.cn&gt; - 1.60.0-2" date="1681214400">- Add loongarch64 support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-3" date="1708171200">- Fix CVE-2024-24577</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.60.0-4" date="1719489600">- Fix CVE-2022-36113,  CVE-2022-36114</changelog>
</package>
<package pkgid="7c19c7262308e5b3e6a692278b1db419fb260786ad2ceb7cde5a28e1090f3e4f" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="14.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-5" date="1669809600">- rename patch</changelog>
  <changelog author="xuxinyu &lt;xuxinyu@xfusion.com&gt; - 21.4-6" date="1671537600">- Type:security
- CVE:
- DESC:delete "ALL=(ALL) NOPASSWD:ALL" in cloud.cfg.tmpl</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
</package>
<package pkgid="302c5222faa3fd34179aa2df1b35c3f001f4cbe309f3db5df3d064be7157194d" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="16.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
</package>
<package pkgid="bc4034aedc6b3f435e12d8f0d9e7b1439a378019f7880a56c0d35804bf5f5468" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="24.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-17" date="1690632000">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-18" date="1690632001">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-19" date="1692360000">- backport upstream patches</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-20" date="1692619200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
       Don't fail if IB and Ethernet devices 'collide'
       Fix default route rendering on v2 ipv6
       Fix IPv6 netmask format for sysconfig
       Fix KeyError when rendering sysconfig IPv6 routes
       Fix network v2 metric rendering
       Ignore duplicate macs from mscc_felix and fsl_enetc
       macs: ignore duplicate MAC for devs with driver driver qmi_wwan
       net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
       net: skip duplicate mac check for netvsc nic and its VF
       Set ownership for new folders in Write Files Module
       cc_ubuntu_advantage: Redact token from logs
       Do not silently ignore integer uid
       Ensure network ready before cloud-init service runs
       Fix exception when no activator found
       Fix KeyError in iproute pformat
       Handle non existent ca-cert-config situation</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-21" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cc_mounts: Fix swapfile not working on btrfs
       cc_mounts: Use fallocate to create swapfile on btrfs
       collect-logs fix memory usage</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-22" date="1699358400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove test_net_freebsd</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-23" date="1699358401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not generate dsa</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-24" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't loosen the permissions of the log file</changelog>
</package>
<package pkgid="f2a3e1a29eb147b48daedd18ef972758b9631e4480f1c188f62be9c70cd390ac" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="30.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-21" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cc_mounts: Fix swapfile not working on btrfs
       cc_mounts: Use fallocate to create swapfile on btrfs
       collect-logs fix memory usage</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-22" date="1699358400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove test_net_freebsd</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-23" date="1699358401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not generate dsa</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-24" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't loosen the permissions of the log file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-25" date="1711454400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix growpart race
       handle error when log file is empty</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-26" date="1712923200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix: Logging sensitive data</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-27" date="1715169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ec2: Do not enable dhcp6 on EC2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-28" date="1718107200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable use-dns for secondary nics
       Make duplicate route add succeed
       Fix predictable interface rename issue</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-29" date="1725537600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix(net): klibc ipconfig PROTO compatibility
       fix(openstack): Fix bond mac_address</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-30" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ensure random passwords contain multiple character types</changelog>
</package>
<package pkgid="ff54d7e00b372cd5d68ff572c81d33723a8380475cb6b7c232fbcd8a1680b597" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="14.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-5" date="1669809600">- rename patch</changelog>
  <changelog author="xuxinyu &lt;xuxinyu@xfusion.com&gt; - 21.4-6" date="1671537600">- Type:security
- CVE:
- DESC:delete "ALL=(ALL) NOPASSWD:ALL" in cloud.cfg.tmpl</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
</package>
<package pkgid="fa7793654c15eeab92ef6bf46f416d90b5750fa22c269715f8635bcd1bb4f0c5" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="16.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 21.4-7" date="1671624000">- make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-8" date="1672920000">- Limit permissions for /etc/network/50-cloud-init.yaml as read-only for root (600)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-9" date="1673006400">- Fix the distro.osfamily output problem</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-10" date="1675339200">- revert make the same authentication behavior for arm and x86 machine</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-11" date="1679918400">- keep custom strict perms when 50-cloud-init.yaml exists</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-12" date="1681387200">- Don't change permissions of netrules target</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-13" date="1682251200">- Fix a unitest error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-14" date="1684065600">- fix CVE-2022-2084</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
</package>
<package pkgid="c898858967a024c9424f3ce63ad2cd218c904a6827de00566cee2aed166647b9" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="24.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-15" date="1684497600">- Cleanup ephemeral IP routes on exception and handle two different routes for the same ip</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-16" date="1684929600">- fix CVE-2023-1786</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-17" date="1690632000">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 21.4-18" date="1690632001">- backport upstream patches:
https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-19" date="1692360000">- backport upstream patches</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-20" date="1692619200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
       Don't fail if IB and Ethernet devices 'collide'
       Fix default route rendering on v2 ipv6
       Fix IPv6 netmask format for sysconfig
       Fix KeyError when rendering sysconfig IPv6 routes
       Fix network v2 metric rendering
       Ignore duplicate macs from mscc_felix and fsl_enetc
       macs: ignore duplicate MAC for devs with driver driver qmi_wwan
       net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
       net: skip duplicate mac check for netvsc nic and its VF
       Set ownership for new folders in Write Files Module
       cc_ubuntu_advantage: Redact token from logs
       Do not silently ignore integer uid
       Ensure network ready before cloud-init service runs
       Fix exception when no activator found
       Fix KeyError in iproute pformat
       Handle non existent ca-cert-config situation</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-21" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cc_mounts: Fix swapfile not working on btrfs
       cc_mounts: Use fallocate to create swapfile on btrfs
       collect-logs fix memory usage</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-22" date="1699358400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove test_net_freebsd</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-23" date="1699358401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not generate dsa</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-24" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't loosen the permissions of the log file</changelog>
</package>
<package pkgid="e9a65b746bca43fd3dc7446ac44c1d5430b7c37dde5d82dd0629e3b682219b55" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="30.oe2203sp1"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-21" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cc_mounts: Fix swapfile not working on btrfs
       cc_mounts: Use fallocate to create swapfile on btrfs
       collect-logs fix memory usage</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-22" date="1699358400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove test_net_freebsd</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-23" date="1699358401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not generate dsa</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-24" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't loosen the permissions of the log file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-25" date="1711454400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix growpart race
       handle error when log file is empty</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-26" date="1712923200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix: Logging sensitive data</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-27" date="1715169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ec2: Do not enable dhcp6 on EC2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-28" date="1718107200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable use-dns for secondary nics
       Make duplicate route add succeed
       Fix predictable interface rename issue</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-29" date="1725537600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix(net): klibc ipconfig PROTO compatibility
       fix(openstack): Fix bond mac_address</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-30" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ensure random passwords contain multiple character types</changelog>
</package>
<package pkgid="b77d3b322d748dec3ae80fe8a08670e396107a3472dbc656ae5f7f39e21b9e50" name="cmake" arch="aarch64">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="a33803e012acce14ee71fb1eef11197046a35e11399189dd5a146637fdaedbd7" name="cmake-data" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="874ca8ae405f8c3707ac6168468f3d2c14e01faf1213c9bcd8493bc33323ec7a" name="cmake-filesystem" arch="aarch64">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="7515563d138f5105ce1cc08c122fa6a99c77f4b8be6d5bdab4c2b5b296012f99" name="cmake-gui" arch="aarch64">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="08174f4cb7c20dd9acdf3da0bbf9c337f8e529526a7c99ca3d66ba252d72989c" name="cmake-help" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="15007a2064ad1d87bb8aad532a85b1a0aa323c96ff918047f916ad0a4efbf4b5" name="cmake-rpm-macros" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="8.oe2203sp1"/>
  <changelog author="wangchen &lt;wangchen137@h-partners.com&gt; - 3.22.0-4" date="1646222400">- Remove rhash-devel from BuildRequires</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.22.0-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 3.22.0-6" date="1691668800">- fix sw_64 portmidi Could NOT find JNI</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
</package>
<package pkgid="da383cd7d8e2eaca0855d3e6e27726319903050c25ba4bf539a696f7ab8ffb53" name="cockpit" arch="aarch64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="44d85598825084c08581f6ab90ee865af95b2d7b7c5fa21dc6316266974f8c39" name="cockpit" arch="aarch64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="d90a51611c891d94bd76113b2b53c12d8483338b4aa63db1209c659e0ea7b48a" name="cockpit" arch="aarch64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="dfbc7eed420595187bab7890f2e49cde4589a4c562172e90921eab1b61cc733c" name="cockpit" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="a81ed047b3774bcb17c348825509a4ad16917398333d86ba5cab75b04643f1c5" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="3.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
</package>
<package pkgid="2b6a8724e052571be7da4640b740290817e1e63a7f81193ccc2c4631dc400ceb" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="5.oe2203sp1"/>
  <changelog author="xu_ping&lt;xuping33@huawei.com&gt; - 1.4.0.31-6" date="1644926400">- Fix attributeError</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.4.3.20-1" date="1647345600">- Update to 1.4.3.20 for fix CVE-2020-35518</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
</package>
<package pkgid="b8365450c6d516d0a3360fbb53120e15151f2aeefe87c05ea7217b9a2012ee22" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="6.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
</package>
<package pkgid="dbe8177ca99ea61dd8d03130505db19de9670d291ab6b3f9158d02e11d7f9641" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp1"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="e3d93a7914ef8dbba99a7620b2f4a3c34a42f994cc7561872a641ab335d7ce96" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="e58c96d8cd1694165d6f4a8d582fce99b54cc3092069806d151b0e655c1ad887" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="484771447a03c715b142a89cae408b798d8d63d1b597f18d4fc4e6a39fa2794d" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="9e51cc79ba78ccc8e1d6397e6d355a607be32d4c1dd043ef0f3af19bd1131391" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="f28727170ac8ec1a05cae56a5dd8daf444415d90952eeda68d2d589d5ef4078b" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="258f71040f6b2754d19a9dea1e2553b1efad462f57033866aeeb9057e93ac6df" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="0daf200bd2d86c761ada7aa1ab062773030ccdf426d2a5d4b873378fe6ba78bf" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="0e469cce4b41652ccde804785615f1cfd927c66adbe6b783fd71f510e7ab0696" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="c5a71b53e10a3f7ee7df311a01cb077d74d32055f7e70cd7e6b5f2cc71a5042a" name="cockpit-debuginfo" arch="aarch64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="be2e4942e1604781337abbd8bec4034c69e400d25ee320bded35704a5a5b32f6" name="cockpit-debuginfo" arch="aarch64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="816ba3848eff76272760f96013cf3d88e760ebd69ee04d2276c4630101774729" name="cockpit-debuginfo" arch="aarch64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="8f776160648dbc80f615b7ac78031b814403b1885ad46e51f2de05fd2ba2e95c" name="cockpit-debuginfo" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="096efc3fddd465be5bc891e12dd22056f79b367f960f9b0bb8585ad45a0c5062" name="cockpit-debugsource" arch="aarch64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="de4e3336bc0a816acab0ec7208c1038380bd6b106ccd7b16e2b585274bdf8962" name="cockpit-debugsource" arch="aarch64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="ff725ec552d5666fab3ad408cb873c9c4eaa3eaba37fcff60f322ffd7ab42b1c" name="cockpit-debugsource" arch="aarch64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="0f72fc827703bfcdf3d0762df30866abb5090fb2345c5fd18e489f2d1f72d154" name="cockpit-debugsource" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="9d1fa27c174f105bf69e86c6c98dde99d50644a162437125c9d3a5c9d1f07803" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="d1270e831f7402bf8df874a645c7a2cf73190a23f16494f15388b62c67cba553" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="07778d5942f39b12852e4dd19ca6cf93f2adfcaa7705a16deb0f84f590856628" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="411e0d24f41c680f84276bc9c5f7c97ed628315b2544862ed4f08827cadf5307" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="6ebd138386dfea297c8428e543614ab9ddbdfe1bbf9afff6fe670faed2e2f688" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="13.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-9" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 178-10" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="wangkerong &lt;wangkerong&gt; - 178-11" date="1632484800">- Type:CVE
- Id:CVE-2021-3660
- SUG:NA
- DESC:fix cve-2021-3660</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
</package>
<package pkgid="6c2866cc8f294c7758e05f706b525f04071c585dac35225dbf4e26ef5f55a00c" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
</package>
<package pkgid="c338a614aab0e0397823037493ed16f72b1d2036919124ef1a00a7cd10e6b4af" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="15.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
</package>
<package pkgid="2fb7881256d6d750639ee5234b0f705377cb1ba546c228be494c7ceebfd4a386" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="17.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="57b9be1a79344a5798c269faa111e674428596c0eaa27a045be82c47f5364cc0" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="309.oe2203sp1"/>
  <changelog author="songyanting&lt;songyanting@huawei.com&gt; - 1.2.0-300" date="1642852800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync bugfix, include
       1. add check in spec
       2. kill container init process if runc start returns error
       3. fix containerd-shim residual when kill containerd durin
       4. fix deadlock on commit error
       5. backport upstream &amp; ttrpc patches
       6. fix exec event missing due to pid reuse
       7. fix dm left when pause container and kill shim
       8. add CGO security build options
       9. fix start container failed with id exists
      10. drop opt package
      11. fix race access for mobySubscribed
      12. improve log for debugging
      13. reduce permission for bundle dir
      14. fix publish command wait block forever</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.2.0-301" date="1652184000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648</changelog>
  <changelog author="zhangsong234&lt;zhangsong34@huawei.com&gt; - 1.2.0-302" date="1655899200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:put get pid lock after set process exited to avoid deadlock</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-303" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Limit the response size of ExecSync to fix CVE-2022-31030</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-304" date="1663848000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: bugfix and add CGO security build option</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-305" date="1668600000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix version number wrong</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-306" date="1668600001">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add ctr binary into package</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-307" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Fix goroutine leak in Exec</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
</package>
<package pkgid="48f0835a61e8a0b4bf205125cf42e1a1709fcbd7feaa91898c48f1ebc6546026" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="316.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-307" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: Fix goroutine leak in Exec</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.2.0-310" date="1681819200">- Sync 2203 loongarch support for containerd patch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-311" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix journald stop container shim log stuck bug</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="86007ff93ce5937bfca2c4197fafd9705df68793b9dd1b87ede12837a666cef6" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="317.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-308" date="1671192000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix k8s build fail without import context</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-309" date="1677499200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-25153 and CVE-2023-25173</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.2.0-310" date="1681819200">- Sync 2203 loongarch support for containerd patch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-311" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix journald stop container shim log stuck bug</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-317" date="1707220800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update vendored golang.org/x/net</changelog>
</package>
<package pkgid="7297f85a6beeb16b600dcc8f13eaa705be3e16db211edece7d012aa66ee52ba8" name="containernetworking-plugins" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 1.0.1-2" date="1641816000">- drop deps for golang packages due to vendor has everything</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.1.1-1" date="1658318400">- update to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.1.1-2" date="1675944000">- Add PIE,BIND_NOW,RELRO,STRIP secure compilation options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.1.1-3" date="1691668800">- Type:sync
- ID:NA
- SUG:NA
- DESC: Add support for sw_64 and loongarch64.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-4" date="1703764800">- Rebuild for golang cves: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537 and CVE-2023-24538</changelog>
</package>
<package pkgid="a96defa2441834c84d0a70a088dd282ccb61ee7adbbaa4e64a4091b792fc5c8a" name="containernetworking-plugins-devel" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 1.0.1-2" date="1641816000">- drop deps for golang packages due to vendor has everything</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.1.1-1" date="1658318400">- update to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.1.1-2" date="1675944000">- Add PIE,BIND_NOW,RELRO,STRIP secure compilation options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.1.1-3" date="1691668800">- Type:sync
- ID:NA
- SUG:NA
- DESC: Add support for sw_64 and loongarch64.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-4" date="1703764800">- Rebuild for golang cves: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537 and CVE-2023-24538</changelog>
</package>
<package pkgid="67d84cd2345734b3229a59e27429480d9f913dc4418e4bf28c966db7ce8eb5cf" name="containernetworking-plugins-unit-test-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 1.0.1-2" date="1641816000">- drop deps for golang packages due to vendor has everything</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.1.1-1" date="1658318400">- update to version 1.1.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.1.1-2" date="1675944000">- Add PIE,BIND_NOW,RELRO,STRIP secure compilation options</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.1.1-3" date="1691668800">- Type:sync
- ID:NA
- SUG:NA
- DESC: Add support for sw_64 and loongarch64.</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.1.1-4" date="1703764800">- Rebuild for golang cves: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537 and CVE-2023-24538</changelog>
</package>
<package pkgid="bd7322a7fd8bcaabe31acc957c12566eac29cc32ba27ecb0d5e0830fda6c0ea1" name="containers-common" arch="aarch64">
  <version epoch="1" ver="1.5.2" rel="3.oe2203sp1"/>
  <changelog author="haozi007&lt;liuhao27@huawei.com&gt; - 1.1.0-7.dev.git63085f5" date="1637841600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:install registries.conf for skopeo</changelog>
  <changelog author="haozi007&lt;liuhao27@huawei.com&gt; - 1.1.0-7.dev.git63085f5" date="1638187200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:udpate skopeo to 1.5.2</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.8.0-1" date="1667822400">- update to 1.8.0</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.5.2-1" date="1671710400">- rollback to 1.5.2</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 1:1.5.2-2" date="1691755200">- add loongarch64 and sw_64 support</changelog>
  <changelog author="lijian&lt;lijian2@kylinos.cn&gt; - 1:1.5.2-3" date="1694692800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="4c26b6f327938ddad84c433122c8ae2561328e35850e2f20417af5c5e0d61223" name="containers-common" arch="aarch64">
  <version epoch="1" ver="1.5.2" rel="7.oe2203sp1"/>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.8.0-1" date="1667822400">- update to 1.8.0</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1:1.5.2-1" date="1671710400">- rollback to 1.5.2</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 1:1.5.2-2" date="1691755200">- add loongarch64 and sw_64 support</changelog>
  <changelog author="lijian&lt;lijian2@kylinos.cn&gt; - 1:1.5.2-3" date="1694692800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="liukuo&lt;liukuo@kylinos.cn&gt; - 1:1.5.2-4" date="1708516800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rebuild for golang cvefix: CVE-2022-41723,CVE-2023-29406,CVE-2023-39326</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; -1:1.5.2-5" date="1715428800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-41723</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.5.2-6" date="1715428801">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2024-28180</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.5.2-7" date="1715428802">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2023-29406</changelog>
</package>
<package pkgid="e4bc989db938e38785b5da0d314b683539504ded94849a9e22745546bec66ae9" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="21a41491b8b448216c4dd0e03fd6d1795789d4c064a95ce6eee288993e003ac9" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="68a92980b7aa835b989cf172c5300e4df3a7f71638810e876c7490f5af3d0bd5" name="cpio-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="77436c8345d566ab166b41c1661df449db6680263deb5b1787ff870582613ccc" name="cpio-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="dc0afcb6328b6c9982e2c530706239b499257c2704dfadbd0b62ced9600c3272" name="cpio-debugsource" arch="aarch64">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="36138a8e9334eb35a415afcbef3a0609dddad8295a69893e862e5f3ac35e91c3" name="cpio-debugsource" arch="aarch64">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="f29290a941dcd8a71a0e7a87e72f504996f139fb15f40ab385d0699c079e38f3" name="cpio-help" arch="noarch">
  <version epoch="0" ver="2.13" rel="10.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-9" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert fix CVE-2015-1197 because it causes AT testcases problems</changelog>
  <changelog author="chenziyang &lt;chenziyang4@huawei.com&gt; - 2.13-10" date="1693396800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches</changelog>
</package>
<package pkgid="d862cc2ba7409c00fb2a7ff26280300d0e48c22d6770cc70c8198ef08a7a9d09" name="cpio-help" arch="noarch">
  <version epoch="0" ver="2.13" rel="8.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.13-4" date="1622808000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add 'autoconf automake' to BuildRequires to use autoreconf command</changelog>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 2.13-5" date="1627646400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Solve mutiple definition compilation error</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 2.13-6" date="1629806400">- Type:CVE
- ID:CVE-2021-38185
- SUG:NA
- DESC:Fix CVE-2021-38185</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.13-7" date="1666872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Rebuild for next release</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.13-8" date="1685188800">- Type:CVE
- ID:CVE-2015-1197
- SUG:NA
- DESC:Fix CVE-2015-1197</changelog>
</package>
<package pkgid="f6ec7fef17a3952d083ddaa5c1e67022165ddb901caacc11c698d1cebbba4eb8" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="140968fc299680bc04125fcd56fd6244711cbaa724b974a0905412e68f005370" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="500720af7e660c6ddbfac149d1637e80b3d0c6bc7a7a90dd2eff777ab3dc2537" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="e4305720cf5d853225f837d3cd4a8f5540816155f6f77cd01185577ea0430a4a" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="e19a55b6106cd48aac523ef5e3b8b2d1757c61ba7f3ce06f22d86be32b976e4f" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="d2c34fbc0c6cf63bbdc39bfa08a492052e54d7923675808b93f8b28c9a4a5d3a" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="bf672031b0664f35c6702d8b09682d98edd6b01f55b4ffe093b81eb185546fa3" name="cpp-gpgme" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="63e1c4b1951ca84c3085204337f0c61f252c5e26f269b725ce93dceacedf37a4" name="cpp-httplib" arch="aarch64">
  <version epoch="0" ver="0.12.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.12.4-1" date="1686657600">- Update to 0.12.4 for fix CVE-2023-26130</changelog>
</package>
<package pkgid="e4fc40d052c55ff0693297d722a676e840d002e9b6f57327748a95962668e9b0" name="crash" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="90fd9f0ea02439e5be69e75e904581042021668bf1882d5edde04ecfc177e6c1" name="crash-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="943ea407bb743610dc3bac4149213432647ac70eeb18329b3c811487f8305da2" name="crash-debugsource" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="79590b18a600d6390eeff938f4432019d2fc97fe5bbaa6d2bc4b63783b24b684" name="crash-devel" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="c0e8547b796a8451cab42c51ee5f940b2f71af0af5c5e5e129306c21a225502f" name="crash-help" arch="noarch">
  <version epoch="0" ver="8.0.2" rel="1.oe2203sp1"/>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.2.9-5" date="1630670400">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-1" date="1640347200">- Upgrade version to 7.3.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-2" date="1640865600">- fix seek error "IRQ stack pointer"</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 7.3.0-3" date="1640952000">- add SDEI stack resolution</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 7.3.0-4" date="1644321600">- fix null pointer reference when CONFIG_KASAN is open</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 7.3.0-5" date="1645617600">- Handle task_struct cpu member changes for kernels &gt;= 5.16-rc1
  and delete use_system_readline_v3.patch</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-6" date="1665316800">- fix gdb CVE-2019-1010180</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 7.3.0-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="Ding Hui &lt;dinghui@sangfor.com.cn&gt; - 7.3.0-8" date="1669896000">- fix backtraces of arm64 KASAN kernel dumpfile truncated</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
</package>
<package pkgid="9c6230e2b11fb6c1dade000d9be31eb8f507580a8af1b4fc0454e0a8ed655ec3" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.2" rel="5.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-8" date="1660305600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ldb require version</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-9" date="1661515200">- Type:cves
- ID:CVE-2022-32743
- SUG:NA
- DESC:fix CVE-2022-32743</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.15.3-10" date="1661947200">- Type:cves
- ID:CVE-2022-1615
- SUG:NA
- DESC:fix CVE-2022-1615</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
</package>
<package pkgid="938c4448a7dba600ce5954702512505c1ce9019182dce3fa4ed541db29600be1" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.5" rel="10.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
</package>
<package pkgid="1e907e2248a562b6d091603e8af94b75e95302eb42a3020ef75ce5e1ff51716b" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.5" rel="11.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-9" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
</package>
<package pkgid="40762dd1502115fe8f282574a09e133e65dfb7df8a1db414366e7443ce373ce0" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.5" rel="2.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-11" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the compilation alarms</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.15.3-12" date="1666785600">- Type:cves
- ID:CVE-2022-3437
- SUG:NA
- DESC:fix CVE-2022-3437</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
</package>
<package pkgid="1cc2e6ec24327b0e478763b89b048feede6adb70ebc44488d8594e5e099b03bf" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.5" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-1" date="1667908800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 4.17.2</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 4.17.2-2" date="1669032000">- Type:cves
- ID:CVE-2022-42898
- SUG:NA
- DESC:fix CVE-2022-42898</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
</package>
<package pkgid="1331ebd796d9ebb82ee0d0cda822d84b60dd867e9ebcfb7139233a6e919fd327" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.5" rel="6.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-3" date="1670500800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of samba's binary files</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-4" date="1671278400">- Type:cves
- ID:CVE-2022-44640
- SUG:NA
- DESC:fix CVE-2022-44640</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
</package>
<package pkgid="f3030959d42d22852b13118d9a2b27dc6ba8e607286b371418f1a55ee8f303d2" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.5" rel="8.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.2-5" date="1672315200">- Type:cves
- ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
- SUG:NA
- DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 4.17.2-6" date="1675857600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:isolate unsupported gold for riscv64</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-1" date="1677240000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update samba to 4.17.5-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 4.17.5-2" date="1677499200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless file</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-3" date="1680782400">- Type:cves
- ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
- SUG:NA
- DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-4" date="1681214400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split samba-client-libs and samba-dc-libs</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 4.17.5-5" date="1687348800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add Obsoletes '&lt; version' and Provides '= version' in spec</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-6" date="1689854400">- Type:cves
- ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
- SUG:NA
- DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 4.17.5-7" date="1691755200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 and sw_64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-8" date="1697112000">- Type:cves
- ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
- SUG:NA
- DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670</changelog>
</package>
<package pkgid="1cbe7f752098c98701e531bc9a126dad0862f48db2c7e66819297650f994204a" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="1d4f104a4ea210c800ced487b7297ef9c81f496f6ea39ebbadb93376a67b7117" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="09764b2271dc55ce895c28c1dbbd696b8529841a027f32073997e824c2b2fc7a" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="f4f396ffa9f561f2178420550392d6d9360d2bcde0f626e793f01615a1a9e74e" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="ed897a132f46eaf37ef95c1f66ae54a54a63b5ced4df176def3cde01e3aab791" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="b1b7fb1d0a09eecb8d91aa10b1801ec45d173599a13860bf53bedf9449b48d1a" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="b464072f06ae1b5498f42da45256eb51270c15d4df0e44950b8a7d4620088016" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="77d7f5d0bba95120e7938488efcc324e731f426964691c99bbfba4be25bedf52" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="0779ece20f7c5dfc97755a6914d6bfffe0bb6c9ef89816bbef16a1466809a408" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="1c7b017f8aa45a2009a795a358d1bbae63f06705ec52f9a34ad3d3e45c746b9b" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="1f3a7fc7c89d06062cf9c82dd68cbdf00498e506f8dd1d83e95317558268c68f" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="4d11f08a69ff72f0849fd34e2c49e4de943dbb8a37b468896f62c59202deb86a" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="b753a1c648ae8fa8aceba2f258d6e05d1aa04fa9af2db2a955dbc44e32ba9f51" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="40f18ba16c72456b60370c493acd204aac0f40d173710e44eb8955c23e9894c9" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="f590c4c47f45b73a76c8b5052625299984b328e9908f29a219bf4042fd5ad4d8" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="52ce217bc4deb5a224c769548e7c6f219ab468740e07dcf71c28f120a9f695c9" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="f5655ffb4608f1d8663557cb4707523f70aa5122405e15ca10492c8a3c66dab3" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="3482aadb2f4934b87d74eedd6b28237f1ad88ac597c7d2e3dc26ddfdb4379f2d" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="d44a8a9840813a84a0b7cf841a0f19ea031d4108ac5244ee210524773d6ff4c1" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="68e7c9aae89d8a9fc7d6b29454680bcc7d3c00bdb485a4b82e6363aa78ce7943" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="238ed1508db2b065a4265b70a6adcd6faafd0085513c9371d0b6832de28bbec7" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="5f68d8b9e79f972c2df415b7db252246523391688f1881b440a85d8e2b9b4c91" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="3b03615f2f03ebe53355db781fb641b01f8254c062749e5e6ce6cd1414d9b1b5" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="03acec4fe0968d9063e41d7f4980316f31fd51197509f6b405c985b13883d5a9" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="51b4be341755fa4e7d121b82a7e1aba9f82562759adfdd55fdc1de4ee21c704b" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="7c39a5b8254f6ca66382ab4735d138d0fc1fc6ed9b21fac85fcd3374a3ae9a32" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="d84f5cbb4a34c9688f7ba75e1fa73a5e513bbc60c36df1c0075977755a412c74" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="948759572aed42223566f0fb48a3f840da147cb07759dadc7d6baf39d6c5c9fb" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="32c6ba4b0d57b100f989685a7688436a951de8e74adabfa542f7b0686a204387" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="555ac5901926537e66258ac1a1a08962305e657b30f0cafd4949fb81f36ba9bc" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="bb249fd4d52f2ab14a10052d6cb827f95fb10246a738d3485f8dee356de82344" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="81bc7d947087ab608a878bea7b65a23b20464fcae6ffba3831efbb11c8bbbeb2" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="75998c859674a4a782b9fb661316dead2f1d9405db0da4030c4f44ec16588ea2" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="cd899368bfce6299197028c811359137121e2ed8978ddb4d2ecdf146a8d00128" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="c3aa5f7c85ee2dce3e90262d113ee97d47b7d081c1b613526d52ba8f4c2a10c6" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="3bc054c19e32df6da6e92052da0a6630e69ce731b9ad0b4840ebea7a4b3fd097" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="ded824111a864dfcdec9e689a5b597c9576228b229dc2b9e6e258c3a49618735" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="5f27e61ce4903dc38ecfc2005c102521eca038c3b9f746f7fe2eb931c1288dd7" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="4eb31d0c93efb0af78f188be4d57c3410a9ba29d78de1ca03b47068a1919cf1d" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="8ce4d759979e2640d8ec557f23e5ef02111c795b2761e6c2cca8fbeb582cfcf7" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="7d10dae8e37617dca06bb729d7518ad3c8e1f7a7e2c623e0f0f0e5e8b09b4188" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="024d8ec9a7702433ace8b446ae7a47e2cff2bc2ae6a9bbace146757bdd7a4290" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="393c55559e4ea200fbbb7a8718cf9f986638fcdfb0b8821b3ee44814a3f80400" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="a6feb9a5e1e28d457e4085a58cc7e2115feed4dafe8c07ecff8c19ec42fa7c15" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="2bf447e2c3457d297acfa08e630f12b10f6e2043e9d2e0790eb967f232b3f202" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="305f40f5988a09310a0fb71f3ed7b6ba4d7facefce6636929b92dd7cbcf06dbd" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="ad526987b9b3cde0acfab575d3d63d2345ab13817eb3842001d37fc01e4b6eef" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="2c34d107f8654e9793fe8a83af6ba0254135f5e85ecf75e9d74d27be19e6c8c2" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="a3b5457debb8c270fb89bc7922129f452d2049efe702a62f6156cb0d3d2655c7" name="cups-filters" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="6869d71a3f93b592f22329f293d6f233ea06699bc83aa507001a80bac1e14486" name="cups-filters" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="08cf54971a45edd5a62d8fc7894899668ab8254cd276440b8a232378696f262d" name="cups-filters-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="6d02626e1a9687b55431d3f48ab79e5e78ac37c35539dfa6f61f58debf3d932c" name="cups-filters-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="66674566b029c0fe4391ae804d44c4956a288f455e2a3dc9f9f21e751aec394a" name="cups-filters-debugsource" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="da4b9cdbe3dc8de900e4265854208bb6b8a47043c03bedef92bdce26af054478" name="cups-filters-debugsource" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="5ffd9ccea5ab656266bc0ee2a5bfcf838f7c6f08efd2baece7b8799a9834fb73" name="cups-filters-devel" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="c2c48e3306aa6d4718391a394b3575ab05c03d2625f78dcd504ed6add5adc31b" name="cups-filters-devel" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="31b593e25495394851fcb455c511ba2b56e8de11d9604546427148a0be9a93cb" name="cups-filters-help" arch="noarch">
  <version epoch="0" ver="1.28.9" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
</package>
<package pkgid="57366cd2e944cdef528e9ffcce5584b45fd7d748027177113f32324c221da9d1" name="cups-filters-help" arch="noarch">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="4503dc8c557f510467c81ace03313530d954e0a6303977f30c1bf27abbab953c" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="373e718fad20aa1947c08640ee80791980e383202b9122d93ca6187cc75c95ec" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="be1bed5476057bacacc8831a7649ff776db77ff67c52919176bb8ebc0f055658" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="e6e6996ab2a71dab9316c2f235b6d559bc21aebe5513be858a53e520e2525524" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="381ff6252613178d4adfcb892ffb756c5b15a320373c64d0bd9acf208ee4fec7" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="a5691b0e1e0f9c54c4caa4eaf4edcaf4df72a70d84fe0ffaffba758231b732bd" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="754c1b06ca8b2970f55ea56cee6c60c4942965004ace1a5041624e3750b407c1" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="21ef68cc7d25adfb3b367533ecdeee36638c438fbc3187fd57fd11f0df220344" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="29a525c2be3ef0e581140da36aed5e6733a0791705e76fd78c586aa691e2bf30" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="7176fa39b9181ceaff8f75ffce640077c6ab7679deb0077496308249ec0ed2ca" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="9639fb10f15f976f28077d9bd2b849abf6709ebc1d615c2813ea9aa5978ab523" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="3f3594a2a67c2b7e6e3d79a0d319e680003d2292e18f52f545d71290a5b1c749" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="0b7ab1b2af8bbeb009fb5bb9d3a8915c0880b55bb9c0a2a3c63cebec869cf636" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="2e85fbf015986c68599a51bd809281bd4fcab9faaf0ca086d8cfc3834723b3c8" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="f9c53efbf2ebf1750a57da363ada4b33c4563059b3a21b49d654d575d1e5427c" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="de06e94670b3dd87610b471860825a0d6375b463b328d0da1210e5cfae121b4b" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="e894f7407972708491e365ea0493aa67cbc78f5a00d79f7ab7b94ec0afc823c9" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="0fcecf63e322a23e979ca44a17c8f9596d633c3c0a46e27a56b0b9a9469f38d2" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="74515b644927ba2f36598fbbbb10c9a7f2ce7faaefbdabeee6f4646b8c30f859" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="38ac135343f47b8ba0c7da0a598e3020f77d238431020935f188c3cf9bc6d8ee" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="c6341892478119d33afc3415013c1b0b694e049ee789dbf6f215698c5496e1d0" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="b4a6e8d351b2e35ad0a6d99df8e4d47d93027ae72e2cc3b69b4575f8e119a425" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="89c48e51fd8686db9f13913c49438588d6335b9bec427bbf6f55292ab76c04ea" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="ce60aee2af361c4c5c34ef1d953075ce6baf67577ff0b08466ec45cc1d393807" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="bbcc6028afd956c941d3ebd0a77decbcdc321bd371d2ddb162bffdf67074b6cc" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="a382c793606432007832588b9d28a558190b67ae9b480c7c1f21078129a0af0d" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="3cce2c093425566e1cf69caed7c7d1f495a7ba90945181cb0059344ccde031c6" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="d912e1476edde2335743df912d5efc6c42c054a2b5b51c9b255076935e5d39db" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="9b0eac16c190c931debcedbbb695a7d66fbeff77edd62a0e650c86e5cebef831" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="eef9e6a06d83a84d17452970eb2e45b333527a2197e8b9f5c991962f1ecde35a" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="bd6f7194ee4c3459a274f9a1a953adacfaf8762595d102da50b8fa00e5ee5c10" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="f2479beeb8d0a4a26d6d93fb94588c312378828b748142a14e570609ce36daa7" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="4c6f7b757b9fbd50d65cc3e877cf62bd0a6073c528049f1b1efe6cf329bd8a4f" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="10.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
</package>
<package pkgid="e8ea8d62aada8340cfd53cf4ebb7a43bfe3794e469b9f31389c832b8d5cfa6be" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="11.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
</package>
<package pkgid="c2bdeabf23b289bcabd83a2e67b1b6a4af33a63399e8be3c407cfb4af18cfa74" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="e0ffc1ea5fdca503562f9b1d992174f9b1c447ef3f5b1e254a156127bd777a39" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="de9a9a459561dc8e6a7bdf92dfc431bc4adb138be12f5e231b5674106d86758b" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="a889a14a21bead63a1fc4dc1d19d8cd2e8df748cddb8a84c7f06ca4b68792f7a" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-4" date="1621857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Compilation optimization</changelog>
  <changelog author="liuyumeng &lt;liuyumeng@huawei.com&gt; - 2.3.3-5" date="1621944000">- remove unused ncp backend</changelog>
  <changelog author="wangkerong &lt;wangkeorng@huawei.com&gt; - 2.3.3-6" date="1623153600">- Type:CVE
- ID:CVE-2021-25317
- SUG:NA
- DESC:Fix CVE-2021-25317</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
</package>
<package pkgid="2041a8091a073e27d7162035ecc8341ae73a98f86c6a710115d96f1122e981b5" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="7.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
</package>
<package pkgid="6623afedfa642e22adeb282631116ddbdec3bd91823ad1dc471bd7ccd40a565b" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="8.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.3.3-7" date="1632484800">- Type:CVE
- ID:CVE-2020-10001
- SUG:NA
- DESC:Fix CVE-2020-10001</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.3.3-8" date="1636027200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cups-devel requires error</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.4.0-1" date="1639051200">- DESC:update to cups-2.4.0</changelog>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 2.4.0-2" date="1652356800">- fix official website address</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-3" date="1654776000">- fix CVE-2022-26691</changelog>
  <changelog author="hanhui &lt;hanhui15@h-partners.com&gt; - 2.4.0-4" date="1655294400">- Remove legacy code for RIP_MAX_CACHE environment variable</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
</package>
<package pkgid="37ad92f5599ab46fb1fbb15273513528d4e7934ef84013aaae9c15b62f6de1cf" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="bfb67249a34bf3fc2ead4e2982aad7599e2836ef3b020c564eb3849516d17e57" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="77bdee6bb4ea289a52a4e4ba91a090507d3e1cdd30a8632359480d68a6c9c4ec" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="50f43b7cee1389c00d458573f9d560438565c26f0325df93767918d300d05c34" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="0d07ea049c6e8656dc82ec461d0dd03a6fa2c3fac9efabd18e7b633ba941117f" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="e22e38c134da68aab1a18fa67fc3d853b909b79aae28412e770ccb0858f4c0b5" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="042bde7b54207ac7681be3560e4eb0e973b7316175d51958d3f063b1fd206867" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="6e23d275e9419ddf75ce2882b5b42e9fc32921b4cd3841e716223ede8ce0c6fc" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="e9deafced27a9c97935de4ef84a090811635e1db47032794282f95e7568d3948" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="d0c5cc8e0284fc96bc4e273fdcfb9f1e7d19cc81280683d1739a3b96bfad8415" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="63289c0b20d68ccb02a6ded270322b51db5a630a5fc2050449181f4112e49280" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="3cc3b9153a5214c701ee3733a09eed5e7a6754341d9530990503086704ed1498" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="34ce1d0afb4f9ab1ee375c6242e9118ee148a8d3d769aae74eb292f1495a17e3" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="7be31ad819064818d5cbfd9dacf8e33b26f93fc8fb787137ea2df6c30840dd6a" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="a3e6421b877ea63db87a1558c5a71f0e8a3db93ef6f8f772dd95096b225c9c1f" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="90473e40f02d05efa23ca2e62f9987ac5697c5c4618f962cf61b5884ea17acde" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="cb191062ff627d0f1b86f9e8afb77929c66452a9803c6e8ad5e30468bacfb89d" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="7e51c6353784af3b1b00229aa8734127bc55d9849778c52b36749f98120a8fce" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="79d57c24dcd227016b7de4e7886d9f834371b811afbe5d906ea45e775c0d9501" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="a4fa649a2f0fb8501d972d5dd95114751242a0507d07d5a9e65603144353eb7d" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="120e3931b4abb4df65cd3484012efe5f7f433283e8898a92b382b1c2fffe4091" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="150382acf1a4075428af3297f53d7db84b3cc07cac3f5dc092b8b8472395e469" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="5c47b01a4c2ad6c0073f0318ce6d8a7951a2b5fe08d78a11526aa797c84d2054" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="2a785b50e2c57093ccce6ee17b3b543679bdb332d60bc316df0ed3443ffc5bb1" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="5a493871541a93576f0b57499ae81102b0613683ca09b6a061dd30a48f8408f4" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="63f11a9a07a43f453c0f8f07f51718aaec2797b0c4da78bd1b630276ae393381" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="21de7c4e85b686092931902ff6ced6d74af02e20229fd132749c0146d4a27feb" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="df79bc2e1ccaa121f637790c631c1105ac43112cf8b7c06789bd36dbb1052951" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="0e7145baca79c3d1113b2d494906070ee1053136fa5d3c4204525099a9ada0b0" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="98642cfe2020ac4d35645ecab3f73afd44de45bee4677ae25a5d1b14eae24a0b" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="b7c6fd213e259d38b2a7bf628b92217d6ba4206b93efb71003746797638fd8ec" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="1253167d54899bf29f6248f30ff51a25da31a04ddefb49896b5a689b23f9af5c" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="72115f75fce3d58079decf817e73d08c6955dfbad855ad641d554a3030283a1c" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="d167ec1ecec2d9da19b6cc9ceca3ceb975846418908231130d5a8e2234d2c97a" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="7d5c92e04b00f34d3e29d751bdca302e2cf0efa4bb5bbac75c2bbdd65e660aaf" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="91398c5b32d62e39cfeed67fb3e795effbd2c5f6e0d66533a8beb460749cf9ab" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="43d4db72f7a2e2351a106816e0e94f700b3deab7d929783c6f67930b5c7a6a71" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="18737e68216f9ac652908c3ad97131e75939c4e3d7a8c5e988412e147a0b2d76" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="ffbded2b9618e9433af0de7ff641cecbacee7d3ee2fd175306954493d9ab32e6" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="bdcb13b3563dcaef8948c6af28dc0269a13bac1e7cfa217a1ccf8a845ec19401" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="330f9919aaac0d7d59118e33bc42f736f3df3d019bf5c099ed1bf8e05f7c3b5d" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="69219b481a579e46b0e38d1547f96039289a3d8c81eb3fc897eaa2a30c28601f" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="01ca91cb34b47f43992cbf0283a85d2c63ae031e44f37623a79696fa3b9c6d82" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="9a43b5c492f1d6045bd21bafe8ffbf3883e178b5b56de4582538266c7d9e635f" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="6a2e94ea7660d774c93912990adea597126fd8e2d5f76fecc3502d1094973831" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="f9dc5e471671abe4c5e7666efbad119aca095264f0ea8777e1a02623a97f628c" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="672b11b73a97808d2731a5765ccd011b3c0d3ad3f0a0c278e206e6a256cf2319" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="59832c7a6e6ee5b1eccbc85e1458086a5e51a87aff3ffa18af05ba345f4b5693" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="9f95214a4d67aaec3a6b8d7839e3b855496c14d03fe309cfeeab905082394137" name="dbus" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="413b96d043a409261f5550b2352e8be0873d55e6066b62a4bb986e549939f9f4" name="dbus-broker" arch="aarch64">
  <version epoch="0" ver="29" rel="9.oe2203sp1"/>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-1" date="1639656000">- Type:enhance
- CVE:NA
- SUG:NA
- DESC:update dbus-broker to v29</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-2" date="1645531200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-3" date="1667908800">- Enable test-parallel</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-4" date="1669118400">- Fix CVE-2022-31212 and CVE-31213</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-5" date="1669896000">- Optimize installing and removing dbus-broker</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-6" date="1686139200">- Enable dbus-broker to reexecute without disconnection</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-7" date="1687694400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-8" date="1691582400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-9" date="1696680000">- Fix buffer leakage</changelog>
</package>
<package pkgid="6fbaacdd9b61c1c50f2695a6669b3db52c587db38e30096661bc834f84ab3d82" name="dbus-broker-debuginfo" arch="aarch64">
  <version epoch="0" ver="29" rel="9.oe2203sp1"/>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-1" date="1639656000">- Type:enhance
- CVE:NA
- SUG:NA
- DESC:update dbus-broker to v29</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-2" date="1645531200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-3" date="1667908800">- Enable test-parallel</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-4" date="1669118400">- Fix CVE-2022-31212 and CVE-31213</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-5" date="1669896000">- Optimize installing and removing dbus-broker</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-6" date="1686139200">- Enable dbus-broker to reexecute without disconnection</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-7" date="1687694400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-8" date="1691582400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-9" date="1696680000">- Fix buffer leakage</changelog>
</package>
<package pkgid="b417da614f2eb430f8ad73dcc94c575993ba8c8e08762e25c4b1a042393eff42" name="dbus-broker-debugsource" arch="aarch64">
  <version epoch="0" ver="29" rel="9.oe2203sp1"/>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-1" date="1639656000">- Type:enhance
- CVE:NA
- SUG:NA
- DESC:update dbus-broker to v29</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-2" date="1645531200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-3" date="1667908800">- Enable test-parallel</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-4" date="1669118400">- Fix CVE-2022-31212 and CVE-31213</changelog>
  <changelog author="licunlong&lt;licunlong1@huawei.com&gt; - 29-5" date="1669896000">- Optimize installing and removing dbus-broker</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-6" date="1686139200">- Enable dbus-broker to reexecute without disconnection</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-7" date="1687694400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-8" date="1691582400">- sync patches from dbus-broker community</changelog>
  <changelog author="hongjinghao&lt;hongjinghao@huawei.com&gt; - 29-9" date="1696680000">- Fix buffer leakage</changelog>
</package>
<package pkgid="52c270b7a1ad1b2df8cb395875763530a8fb17bc2eafbf1b48d0ba57ba9277c5" name="dbus-common" arch="noarch">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="6b49c58bf4a57d1c52224cae2b848a1fff714789c42eea2c0c240f0a97c119d4" name="dbus-daemon" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="4f73116daa5fffddf2d64380fdcc786b5399ffe135a26bfa2a52acb4c4d6e865" name="dbus-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="359dd9da4a836af8f46a507cc34e75de65d8abb76f3adc83ee27d207613e34ae" name="dbus-debugsource" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="b561a8feb421c295efadf9bb7b9d5a1f4f4eb45b823fcb1ff8c28b0d3c1ae749" name="dbus-devel" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="e0db9b7128648a4740e851493a8fd5d879a4a53d7d454c6fb1ed393f61200eb1" name="dbus-help" arch="noarch">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="c308afe9ce5d6239a37e948651104a9c40cfd07afca654e1d675b894860d4f42" name="dbus-libs" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="7101a833778e3fd6ba54e3b08f5ffbc77b1dd7c74282946af99b387b20f1c85b" name="dbus-tools" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="184ed9459494dfde12e0f553be081dcd8901b6c140ecec73ed2a4e22d5c20a31" name="dbus-x11" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="9.oe2203sp1"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 1:1.12.20-4" date="1626955200">- remove build requires of gdb</changelog>
  <changelog author="xuxiaozhou &lt;xuxiaozhou1@huawei.com&gt; - 1:1.12.20-5" date="1638273600">- add print-load-average-when-activate-service-timeout.patch for more debug information</changelog>
  <changelog author="licunlong &lt;licunlong1@huawei.com&gt; - 1:1.12.20-6" date="1643457600">- Tell systemd when dbus is ready/shutting down/reloading config.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-7" date="1663675200">- Stop using selinux set_mapping function.</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-8" date="1666008000">- fix CVE-2022-42010,CVE-2022-42011,CVE-2022-42012</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:1.12.20-9" date="1686312000">- fix CVE-2023-34969</changelog>
</package>
<package pkgid="3aa5a9860b23bde83eb94d1263d5943abf16aa39adb6cc58052ce5a2aef9d924" name="dcraw" arch="aarch64">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="7ec6522f5d86539eaa03574afe5c4122f0f2add486a8812353ee040a7f0d4c54" name="dcraw-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="3c9b9b92fc432f3490c62efb03e07863e405231f175d8e6de6c2397251d94092" name="dcraw-debugsource" arch="aarch64">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="fc82773c23ffc1e36641b4074c3001ebda5e74c77bc56dcdb0354dbcf145ec6b" name="dcraw-help" arch="noarch">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="ac14335310d56002bf4c0816159903be2c70a501a60f582a49b1de6d568f77f8" name="dejavu-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.37-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.37-3" date="1722513600">- repair SOURCE file loss</changelog>
</package>
<package pkgid="1a56416da0ff919fe2292d9f31e6aef9261f58de63d6397d5ef9817bb5368509" name="dhcp" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="9b240d13e65f21a0b44f855ff656ff3cf50dc0718a51b6e991a895afc43a3050" name="dhcp-debuginfo" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="130e95826310c05579096ff25001ef8a1e96d6e4bae7f7ba01cfadfcfd3e3994" name="dhcp-debugsource" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="adbf9e45e562cb33d2d6aea7ff2e0262ef6e60d4d3cb4b3a31afc65512f13190" name="dhcp-devel" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="7cf0c00c385a0fd9dd593feb1df7191702372ec49916068f7c59cf8ae4e94685" name="dhcp-help" arch="noarch">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="0aa221e062344551587f003838638a9b7ae9a49be96a62da4f2f3699bda3a8e4" name="digest-list-tools" arch="aarch64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="3a21cec8cc40f7bda6c8d776c6d31e1b8b1c34c28a21d02b27a372ad3ed72e2a" name="digest-list-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="820db89fd50518de7cf04f95df4c66a1845e588926d88e9b56bd775b6ac94737" name="digest-list-tools-debugsource" arch="aarch64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="fef87f378c9aa0f487c064771a6781e7f8412e4042b3949665169d43723bffc4" name="digest-list-tools-devel" arch="aarch64">
  <version epoch="0" ver="0.3.95" rel="11.oe2203sp1"/>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-3" date="1627905600">- Fix multiple definition of pgp_algo_mapping</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-4" date="1629806400">- Fix warning in digestlist.conf</changelog>
  <changelog author="Anakin Zhang &lt;zhangtianxing3@huawei.com&gt; - 0.3.95-5" date="1638446400">- Fix typo and duplicated kernel parameters</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 0.3.95-6" date="1659182400">- Fix sm3 algorithm name</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-7" date="1660651200">- Fix faulty code, file resource leakeage and memory leakage</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-8" date="1661256000">- Update fix-faulty-code.patch</changelog>
  <changelog author="shenxiangwei &lt;shenxiangwei1@huawei.com&gt; - 0.3.95-9" date="1662552000">- Delete setup-ima-digest-lists.service</changelog>
  <changelog author="gaoyusong &lt;gaoyusong2@huawei.com&gt; - 0.3.95-10" date="1671537600">- Fix error exit in dracut program</changelog>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 0.3.95-11" date="1684929600">- Fix cap_struct to adapter libcap 2.61</changelog>
</package>
<package pkgid="3b68562c13ccdd4795479c85dd24283b04ce43778deb6e265bc1ed1ec59e2095" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="fcc36968abec96770bef4dd96ae9a12a466835573727bc415e0cd748d444bdce" name="djvulibre-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="a6a7354326e4da7f7fab53802fce8b92f37d65e78f63c7c422790613b54e8042" name="djvulibre-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="e8bc1923ba4572b0d7660fe08c6a0cc996f126c3bfd1e1ba34c08ee5f0d18fd5" name="djvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="6ad5afc8e1fbaf0f1b91c5906b858d6435db8f7e88aadf844b67957846262cd8" name="djvulibre-help" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="19.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
</package>
<package pkgid="5324cf63aeb200180b839b5d2dd08a5b54ef4029bc7e765c21a1a619840d77be" name="dmidecode" arch="aarch64">
  <version epoch="1" ver="3.4" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3-1" date="1638273600">- update to 3.3</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-2" date="1643457600">- add command --compat-uuid</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-3" date="1645704000">- dmidecode: Fix crash with -u option</changelog>
  <changelog author="fanrui &lt;fary.fanrui@huawei.com&gt; - 1:3.3-4" date="1666699200">- rebuild package</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:3.3-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="fanrui&lt;fary.fanrui@huawei.com&gt; - 1:3.4-1" date="1667995200">- Update to 3.4</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:3.4-2" date="1668427200">- add loongarch support for dmidecode</changelog>
  <changelog author="Cunshu Ni &lt;nicunshu@huawei.com&gt; - 1:3.4-3" date="1681819200">- fix CVE-2023-30630</changelog>
</package>
<package pkgid="954e0ce4e716a267f30f254cccae102197d7e7e79f1be6739a749d834bea9b5e" name="dmidecode-debuginfo" arch="aarch64">
  <version epoch="1" ver="3.4" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3-1" date="1638273600">- update to 3.3</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-2" date="1643457600">- add command --compat-uuid</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-3" date="1645704000">- dmidecode: Fix crash with -u option</changelog>
  <changelog author="fanrui &lt;fary.fanrui@huawei.com&gt; - 1:3.3-4" date="1666699200">- rebuild package</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:3.3-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="fanrui&lt;fary.fanrui@huawei.com&gt; - 1:3.4-1" date="1667995200">- Update to 3.4</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:3.4-2" date="1668427200">- add loongarch support for dmidecode</changelog>
  <changelog author="Cunshu Ni &lt;nicunshu@huawei.com&gt; - 1:3.4-3" date="1681819200">- fix CVE-2023-30630</changelog>
</package>
<package pkgid="7380070560ae0c3b9a5dca5dd8f7d729be4272acd8d3b1858dd654ce7be8b60d" name="dmidecode-debugsource" arch="aarch64">
  <version epoch="1" ver="3.4" rel="3.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 3.3-1" date="1638273600">- update to 3.3</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-2" date="1643457600">- add command --compat-uuid</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 3.3-3" date="1645704000">- dmidecode: Fix crash with -u option</changelog>
  <changelog author="fanrui &lt;fary.fanrui@huawei.com&gt; - 1:3.3-4" date="1666699200">- rebuild package</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1:3.3-4" date="1667476800">- Add sw64 architecture</changelog>
  <changelog author="fanrui&lt;fary.fanrui@huawei.com&gt; - 1:3.4-1" date="1667995200">- Update to 3.4</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 1:3.4-2" date="1668427200">- add loongarch support for dmidecode</changelog>
  <changelog author="Cunshu Ni &lt;nicunshu@huawei.com&gt; - 1:3.4-3" date="1681819200">- fix CVE-2023-30630</changelog>
</package>
<package pkgid="5a55b8c3294802024036cb1d0b784022834150cd1ff2831b65071ce6971f3012" name="dmraid" arch="aarch64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="6d0d391ea133b41f016c825627a8af2bbc424ffba0c36920e1fe901bbb6ba399" name="dmraid-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="5b58c747a488ba696e313c741dbbe66e27d3aad813579e8dee3728a5a6f2180d" name="dmraid-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="b340ee634d272b9125af551242dbc59cf90800fc5f613ff3741f1e9dc078c6ac" name="dmraid-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="0a2c5aa8034fa8a0be62bfcf01396284bc39d2dbe4dc7a35b6d3fa4c6b1d3bf6" name="dmraid-events" arch="aarch64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="2753ee215ea8f113c9c5c8468b422050ce8052ca4d409f60ea1e216a8abbef7b" name="dmraid-events-logwatch" arch="aarch64">
  <version epoch="0" ver="1.0.0.rc16" rel="55.oe2203sp1"/>
  <changelog author="shaoxuehua &lt;shao_xuehua@hoperun.com&gt; - 1.0.0.rc16-55" date="1695297600">- fix segmentation fault when using "dmraid -h" on aarch64</changelog>
</package>
<package pkgid="3143d0440ad744feb25294eb6270f4439163a276039d88764130dec566870fde" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="ce90dab1fa817a06f20b9b48324c2743d5a5be972bc54c783842efbd991ac2a6" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="d739e5cb5ecaaf4908f7c8824d4139fe3f7fa24f4b1a4b5ec102f50f55c68b08" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="e4051f87f93e3c2575858074394bb9328cce334658d8d3d44f1619225b73807b" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="c2916b0c4b26581b42d11ccc78ee285604e4d79d9f7a7419b4369be1e5303b58" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="5419fef56d62e0c70bda7974bd2b754693869d11fb97075d08f060e2d1572270" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="53b48e8a6e0dafb284f8c80159ebf686a79a9a07303efd8160dcfbe1630a5ffe" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="a9594690e5906a05a2eaa728dad570ed915d2ebdd391d4e50ca0bc3690a42fb8" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="aed7df3fb68dbb7c72a456300250515b5238c4f5a7a01a9afe2b6194cdeedd34" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="abcf410eb38d365c43a34c56ab66e0f98ae70b7d1241e8f64315cded97bf25b5" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="aeaaefbfa00201f9c9168850384e208338f99ff3a96989a0c0100c2c460ed522" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="403b1e53c8759ebb9385ef9fcc32d92f296b5d501dfdae277a7dc0e4c2da9c60" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="eb5816242ef3ab5e14c31fb4ffc5e7d599e7e1e89ad5041c67751b37becc7648" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="f1ec3a7127c9de9a03a44c23d3a746f01030714768a959830ccbe8615a20552c" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="171285d77581b1f0ade654e53fcae9993ebd319bc9d4678be1e70c03dc18bafe" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="64069c2d2c526f7218c79979fd893f072b8b971b90dab61329c9ae8d3876d66f" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="14bd85b5337e9542e95f83c1e0c3b10d28017afac695984c32d8e0bd7a3f4ffe" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="45b02468ba5ff6314da80761416ef8cdc4dc76251b3c187d5a183dd6c0f0b669" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="0ed5b046d1ff8449f66beda3a20d6fe5cb330e77b6e8724a593d4512ebb13855" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="10.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-1" date="1667476800">- DESC:upgrade dnf version to 4.14.0</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-2" date="1668600000">- DESC:correct the incorrect Obsoletes</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-3" date="1670587200">- DESC:enable DT</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587201">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
</package>
<package pkgid="3069e8ebfe22df0108f64c1e4a9b08dc721d125f948e7d83cbd1af1014d5b499" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="13.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-4" date="1670587200">- DESC:add sw64 and loongarch support for dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
</package>
<package pkgid="6f4e6e352651eeda72de7596bc0f09bab125e2e9562a99b22c5bf151bdda6acf" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="14.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-5" date="1670932800">- DESC:fix dnf-data downgrade confilct with dnf</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
</package>
<package pkgid="abe9535f544ef13d6adf107fa6d4badd2814a43178939d8e94804a8d89ec0041" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="15.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-6" date="1671105600">- DESC:remove tests</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-7" date="1671537600">- DESC:fix test cases failed in tests/test_plugin.py</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 4.14.0-8" date="1673006400">- DESC: fix build error for loongarch64</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
</package>
<package pkgid="d0036994d8af296cbeb9e9a33bd0a6f858e2513ac5b3be0f4918eac0e7861880" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="18.oe2203sp1"/>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-9" date="1673352000">- DESC:add get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-10" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:fix install error when vim file in /etc/dnf/vars/</changelog>
  <changelog author="xiasenlin &lt;xiasenlin1@huawei.com&gt; - 4.14.0-11" date="1677067200">- DESC:Add exception capture to get-lockfile-exists-before-unlick.patch</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-12" date="1678190400">- CVE:NA
- SUG:NA
- DESC:dnf:fix undo error when include rollback of group upgrade
           fix can't download package when url have characters encoded</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
</package>
<package pkgid="8e7f82b5916090c1110babba02d8b2135fd8af6d3e3f5cd81c20cdb7e4f952ba" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp1"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="9a80663f95bb8e54e4f7d7ac315cbef69e8c2a10a94577364d07ca86c2655a89" name="dnf-plugins-core" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="bef111d130c476ee2bff58c8c625c14628c540b417a724a53e79f1436abf10f4" name="dnf-plugins-core-help" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 4.0.17-3" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-1" date="1637668800">- DESC:update to 4.0.24</changelog>
  <changelog author="wangkerong&lt;wangkerong@huawei.com&gt; - 4.0.24-2" date="1641556800">- DESC:delete buildrequires of python-nose</changelog>
  <changelog author="hanhui&lt;hanhui15@huawei.com&gt; - 4.0.24-3" date="1642852800">- DESC:Reposync does not stop downloading packages</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 4.0.24-4" date="1653566400">- DESC: Remove redundant BuildRequires</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.0.24-5" date="1661169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add configfile post-transaction-actions.d</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-1" date="1667476800">- DESC:upgrade dnf-plugins-core version to 4.3.1</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-2" date="1669896000">- DESC:modify incorrect contents in spec file</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.3.1-3" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value</changelog>
</package>
<package pkgid="f62b681cd1d3ddac6d8b075f8f7df776e6c1bda014c8da8a0913c1c47c25e89f" name="dnsmasq" arch="aarch64">
  <version epoch="0" ver="2.86" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-2" date="1657713600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-0934</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-3" date="1666872000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix parsing of IPv6 addresses with peer from netlink
       Fix bad interaction between --address=/#/&lt;ip&gt; and
            --server=/some.domain/#
       Fix --address=/#/...... which was lost in 2.86</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-4" date="1679140800">- Type:CVE
- Id:CVE-2023-28450
- SUG:NA
- DESC:fix CVE-2023-28450</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
</package>
<package pkgid="95c134a07532eff65e62d666643b7570cbca4207e11ee3d4266bf31d302a9d89" name="dnsmasq-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.86" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-2" date="1657713600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-0934</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-3" date="1666872000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix parsing of IPv6 addresses with peer from netlink
       Fix bad interaction between --address=/#/&lt;ip&gt; and
            --server=/some.domain/#
       Fix --address=/#/...... which was lost in 2.86</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-4" date="1679140800">- Type:CVE
- Id:CVE-2023-28450
- SUG:NA
- DESC:fix CVE-2023-28450</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
</package>
<package pkgid="1f2fb992cb25c3f026e9e42aa3576b53e786a2c5d79b9e1ee3ddc1c53791e0db" name="dnsmasq-debugsource" arch="aarch64">
  <version epoch="0" ver="2.86" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-2" date="1657713600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-0934</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-3" date="1666872000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix parsing of IPv6 addresses with peer from netlink
       Fix bad interaction between --address=/#/&lt;ip&gt; and
            --server=/some.domain/#
       Fix --address=/#/...... which was lost in 2.86</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-4" date="1679140800">- Type:CVE
- Id:CVE-2023-28450
- SUG:NA
- DESC:fix CVE-2023-28450</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
</package>
<package pkgid="b326b021c7bcd0a3d0af5b2fd3df0226ddef52c19c01ef7c7addb291c54071ae" name="dnsmasq-help" arch="aarch64">
  <version epoch="0" ver="2.86" rel="8.oe2203sp1"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-2" date="1657713600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-0934</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-3" date="1666872000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix parsing of IPv6 addresses with peer from netlink
       Fix bad interaction between --address=/#/&lt;ip&gt; and
            --server=/some.domain/#
       Fix --address=/#/...... which was lost in 2.86</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-4" date="1679140800">- Type:CVE
- Id:CVE-2023-28450
- SUG:NA
- DESC:fix CVE-2023-28450</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
</package>
<package pkgid="2375a7fe272450e34da8ea2808f619abb60121dc6e38eca5e0e58d9cada16007" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="323.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-313" date="1669118400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-314" date="1669118401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-315" date="1669291200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-316" date="1669896000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-317" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 18.09.0-318" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:docker stats: fix 'panic: close of closed channel'</changelog>
  <changelog author="JackChan8&lt;chenjiankun1@huawei.com&gt; - 18.09.0-319" date="1678795200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-320" date="1678881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-321" date="1680091200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-323" date="1680782400">- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842</changelog>
</package>
<package pkgid="c50548de8f2a24e1ac13d30b6e4cc9a4805037a76090b553de61740e07d581b0" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="333.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 18.09.0-324" date="1681905600">- Sync 2203 support loongarch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
</package>
<package pkgid="03e4334fb14a7d280a486e37f5e8db5a1ba20a0ead9afc8cff3e08bd5e4f9018" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="334.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
</package>
<package pkgid="1e3e4fa84c304c621f280dfb970e455e1d69e14273593963ffc4c8060386a098" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="335.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
</package>
<package pkgid="14d360f61023561eb5639ae42978cd148da25737bab3be3c1561dd77d379d93d" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="a80ff9949e3a95611863f3fa8615fa0b740771497ea1a1a64416198f74be74ce" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="323.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-313" date="1669118400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-314" date="1669118401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-315" date="1669291200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-316" date="1669896000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-317" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 18.09.0-318" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:docker stats: fix 'panic: close of closed channel'</changelog>
  <changelog author="JackChan8&lt;chenjiankun1@huawei.com&gt; - 18.09.0-319" date="1678795200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-320" date="1678881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-321" date="1680091200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-323" date="1680782400">- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842</changelog>
</package>
<package pkgid="2216836acff29aaaf410ab0cc41d89c3eff9ae03b7c9bbd24994486ede3f6532" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="333.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 18.09.0-324" date="1681905600">- Sync 2203 support loongarch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
</package>
<package pkgid="94cf4b68adce093bba36dc1a07722895ac294eeb28f7afb14fa1b6c2ca4c4eb9" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="334.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
</package>
<package pkgid="345c2b01bb4bda1583c98f7cc02003a6a07ade17ed4f6d1e1ad4d2c3cc114f49" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="335.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
</package>
<package pkgid="565ee2bbf422ccbaf87a66a504487b7274ee23f75fa160a84c26c21acc156377" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="3ac53bb138ddc43b2a5daf901672debd160d0208335aab62ef15a49e42b425c8" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="323.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-313" date="1669118400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-314" date="1669118401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-315" date="1669291200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-316" date="1669896000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-317" date="1676635200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 18.09.0-318" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:docker stats: fix 'panic: close of closed channel'</changelog>
  <changelog author="JackChan8&lt;chenjiankun1@huawei.com&gt; - 18.09.0-319" date="1678795200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-320" date="1678881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-321" date="1680091200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-323" date="1680782400">- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842</changelog>
</package>
<package pkgid="1aeca75c06690c2a67c8d659396b8cb94803416e74703c94a4c18a7626705ab3" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="333.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 18.09.0-324" date="1681905600">- Sync 2203 support loongarch file</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
</package>
<package pkgid="fc0d01e86b0dd0bfcaeefc1136718edee7cc75a5131a039954b8fd2a45d7f7b6" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="334.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-325" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
</package>
<package pkgid="7b79d3823326442df1267833b5601cb75769b2952939f992b70b5ccfda770905" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="335.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-326" date="1689163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-327" date="1689249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from master</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 18.09.0-328" date="1690545600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
</package>
<package pkgid="e2318f212dcfe7931be491f1f7491db37cda2f671b958f45107c835cda651ec0" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp1"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-329" date="1693051200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="58a8268799b7fc647616e8bdbcff47cdb3a83ca440f0178e0aab71e7ecb8ef87" name="docker-runc" arch="aarch64">
  <version epoch="0" ver="1.1.3" rel="13.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-4" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-5" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-6" date="1667822400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc log forward to syslog</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-7" date="1671278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-8" date="1672920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify apply-patch path</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-9" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-10" date="1673956800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify linuxcontainer starttime uint64 type tobe string</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-11" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:make runc spec compatible 1.0.0.rc3</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-12" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libcontainer: skip chown of /dev/null caused by fd redirection</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-13" date="1680609600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix rootless /sys/fs/cgroup mounts bug and Prohibit /proc and /sys to be symlinks</changelog>
</package>
<package pkgid="33d04ca201abf836fefd18d9a91d2605e67dd437d1dd111da8e91b2b9d9b89dc" name="docker-runc" arch="aarch64">
  <version epoch="0" ver="1.1.3" rel="23.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-15" date="1687348800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-16" date="1695038400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix init error return logic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-17" date="1697112000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:handle kmem.limit_in_bytes removal</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
</package>
<package pkgid="cb300c78b9dddcc430c02fcdd2594497021812a0fad4005acb2657a9a10b790c" name="docker-runc" arch="aarch64">
  <version epoch="0" ver="1.1.3" rel="25.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-16" date="1695038400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix init error return logic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-17" date="1697112000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:handle kmem.limit_in_bytes removal</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
</package>
<package pkgid="801a33eb783c6f8630e5bdda79e15896f6e4795df208fcc580642acc303f4f94" name="docker-runc" arch="aarch64">
  <version epoch="0" ver="1.1.3" rel="28.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-18" date="1698148800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix update rt-runtime-us and rt-period-us failed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
</package>
<package pkgid="bf57243c5a6ac82e03fa3e1f824cc92565b3dae0f54ea2dc5c8e434605639222" name="docker-runc" arch="aarch64">
  <version epoch="0" ver="1.1.3" rel="30.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-29" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:format log instead panic when procError missing payload</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 1.1.3-30" date="1725969600">- Type:CVE
- CVE:CVE-2024-45310
- SUG:NA
- DESC:fix CVE-2024-45310</changelog>
</package>
<package pkgid="8a34be34d873680813a55366e40a94ce042d5413c84157e4dc44b3f800f19572" name="docker-runc" arch="aarch64">
  <version epoch="0" ver="1.1.3" rel="9.oe2203sp1"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.0.0.rc3-303" date="1660046400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:bump version to 303</changelog>
  <changelog author="wangjunqi &lt;wangjunqi@kylinos.cn&gt; - 1.1.3-1" date="1660046401">- update to 1.1.3</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-2" date="1660046402">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change Umask to 0022</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-3" date="1660651200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix systemd cgroup after memory type changed</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-4" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-5" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move install path to /usr/bin</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-6" date="1667822400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc log forward to syslog</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-7" date="1671278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-8" date="1672920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify apply-patch path</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-9" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support specify umask</changelog>
</package>
<package pkgid="5575b0e9afec8d2ea34d45bad805e197f211b93dd79dca524baebac707cb17cf" name="dovecot" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="5f5af1759fa7e953e967b294af44ee925747cd0e58ba4c80f8fca337f93b0686" name="dovecot-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="ee38ec0360f87a3ce612a1db39c6f07f784aa4fa08faa8c5ee581b2b1f4f5310" name="dovecot-debugsource" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="af9bbad1989580d408b17df1048352af4037372ec513901b1903f3571fdf16ea" name="dovecot-devel" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="749edeec595152b4016a91b6c26171d8309ccc8d6476ad14c65e9a7900e9e8cb" name="dovecot-help" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="6946bedebecddfbc7a5fc05781fcf4a4951e91ad9bcbe89fbb393b979ad6e3ff" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="2310efdc5ff69236953e2cc4a76b0d79d41f685940a7c0fe444b50c846632a22" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="435a60a7c10f397119db072b0ed01ae6cfd1d9dabae822714f38776dae1c6bf2" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="3312ba3fed86a0a9dc31095745a5176a0071fa1dc8a45bbce2fe27fd3ca535e8" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="b1820f317f989fd3836f35061f0c638de96d8529262bb783bdcd35831c265bd6" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="67.oe2203sp1"/>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 21.11-64" date="1706875200">Add support for ppc64le</changelog>
  <changelog author="zhangmengxuan &lt;zhangmengxuan@kylino.cn&gt; - 21.11-65" date="1712577600">Add add-rte_eth_bond_link_monitoring_get API in map</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-66" date="1716897600">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - app/testpmd: fix crash in multi-process forwarding
 - net/hns3: fix offload flag of IEEE 1588
 - net/hns3: fix read Rx timestamp handle
 - net/hns3: fix double free for Rx/Tx queue
 - net/hns3: fix variable overflow
 - net/hns3: enable PFC for all user priorities
 - ring: add telemetry command for ring info
 - ring: add telemetry command to list rings
 - net/hns3: support power monitor
 - net/hns3: disable SCTP verification tag for RSS hash input
 - app/testpmd: fix RSS algorithm choice</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-67" date="1717416000">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: support new device
 - dma/hisilicon: remove support for HIP09 platform</changelog>
</package>
<package pkgid="a472d270a436a2c5d24bab5c60da23ff9e2c3930578c095224f5fe4e37e27fc8" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp1"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="6674dc6c0c027a0c0d32aff8a400db4ded21a2ae4ce10e799cfc94d0ab8392d8" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="7ceefb4a72710fe0891c6b89c8204027b8faa1623c69567eba8df4c048f341cf" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="8984a68fa75a983d56c38f816aafc1e4db17ddb511cad4dd1d7943838e29b390" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="e4fddedf7b23c037d014360d1c39f5f686b1c21e64960bd52868899acd312a67" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="4abadb685ae77992e30d59032975aaab2f9b1c3c422e93ed2f858d0bc6df4231" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="67.oe2203sp1"/>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 21.11-64" date="1706875200">Add support for ppc64le</changelog>
  <changelog author="zhangmengxuan &lt;zhangmengxuan@kylino.cn&gt; - 21.11-65" date="1712577600">Add add-rte_eth_bond_link_monitoring_get API in map</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-66" date="1716897600">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - app/testpmd: fix crash in multi-process forwarding
 - net/hns3: fix offload flag of IEEE 1588
 - net/hns3: fix read Rx timestamp handle
 - net/hns3: fix double free for Rx/Tx queue
 - net/hns3: fix variable overflow
 - net/hns3: enable PFC for all user priorities
 - ring: add telemetry command for ring info
 - ring: add telemetry command to list rings
 - net/hns3: support power monitor
 - net/hns3: disable SCTP verification tag for RSS hash input
 - app/testpmd: fix RSS algorithm choice</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-67" date="1717416000">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: support new device
 - dma/hisilicon: remove support for HIP09 platform</changelog>
</package>
<package pkgid="71fabfb7b03e928eeb158cf1ba1ce34fddd375ae8301cf3720d033002b2b11f6" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp1"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="4fc973c9384ebe2e2a130545d94979eb86b0fd412e2d5c0cf396f7225fe0b677" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="3294e063c08a28436e14d29a2d850ae2e9eb55ac10f0af965444207eaa3c5741" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="b67bc7ceaccf04ee226a01329da65eef6148b392aaad55bc8f6e1fc8b00c38c4" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="7af01ddbabc13d0f4faf6f8bd464dd2207634ec7982734592503f93b58f7b0c7" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="5a0fede6c41171d2a2f2897d5ce2b053e9e53696cdee1b29b2e42a079d3322fd" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="67.oe2203sp1"/>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 21.11-64" date="1706875200">Add support for ppc64le</changelog>
  <changelog author="zhangmengxuan &lt;zhangmengxuan@kylino.cn&gt; - 21.11-65" date="1712577600">Add add-rte_eth_bond_link_monitoring_get API in map</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-66" date="1716897600">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - app/testpmd: fix crash in multi-process forwarding
 - net/hns3: fix offload flag of IEEE 1588
 - net/hns3: fix read Rx timestamp handle
 - net/hns3: fix double free for Rx/Tx queue
 - net/hns3: fix variable overflow
 - net/hns3: enable PFC for all user priorities
 - ring: add telemetry command for ring info
 - ring: add telemetry command to list rings
 - net/hns3: support power monitor
 - net/hns3: disable SCTP verification tag for RSS hash input
 - app/testpmd: fix RSS algorithm choice</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-67" date="1717416000">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: support new device
 - dma/hisilicon: remove support for HIP09 platform</changelog>
</package>
<package pkgid="8d8d4b56530cc234b43b87032c9920f782a343f4020845662bd9776d28507f13" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp1"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="429e76d22c724d5cdb63bb562f1b573e05e6c0ab7c0207a03cd2c4484e3144ee" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="a219a5f0bc7b2a29523668c42156738b925059bf3162dfa0acd41779aee42d59" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="50bc2461505e1c970bd2638e7ff9c025a442270b62cf843dcb3ce3dca27a4e2d" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="659361385287681006bf731b66fb853cb1d01a3eb429c545b4efdd8c0c3ca19f" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="4fa3d477a5ca438cec8085bca4e1b5697f73ba07c2d64b8d3b13ea9085e310eb" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="67.oe2203sp1"/>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 21.11-64" date="1706875200">Add support for ppc64le</changelog>
  <changelog author="zhangmengxuan &lt;zhangmengxuan@kylino.cn&gt; - 21.11-65" date="1712577600">Add add-rte_eth_bond_link_monitoring_get API in map</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-66" date="1716897600">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - app/testpmd: fix crash in multi-process forwarding
 - net/hns3: fix offload flag of IEEE 1588
 - net/hns3: fix read Rx timestamp handle
 - net/hns3: fix double free for Rx/Tx queue
 - net/hns3: fix variable overflow
 - net/hns3: enable PFC for all user priorities
 - ring: add telemetry command for ring info
 - ring: add telemetry command to list rings
 - net/hns3: support power monitor
 - net/hns3: disable SCTP verification tag for RSS hash input
 - app/testpmd: fix RSS algorithm choice</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-67" date="1717416000">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: support new device
 - dma/hisilicon: remove support for HIP09 platform</changelog>
</package>
<package pkgid="a1d2f55e95dc788984f34da98fbf611aa2b9e556a6a4b0e709028486414c8e8b" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp1"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="91dc5d0d98b595ca3552189fce7a7acf8354716266f993b18b107c40ab3f464f" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="39844bb57eb3ddbe1a31f410458ca0edd7e7d1bcc8eb57defa438caff7ed1a5a" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="54dbe146bfceb9b4ffb1c7eec7c531eabef539fb19c9355bd66e963896732aac" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="840e38e947099e0165b9c3b9c155306aaf60ae86ecca48c7e4063b07d03dd6f4" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="ee64084dc59b97c5a52319411aae3527cd4a76f3fc36448a789ff5e6b1ab7dcd" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="67.oe2203sp1"/>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 21.11-64" date="1706875200">Add support for ppc64le</changelog>
  <changelog author="zhangmengxuan &lt;zhangmengxuan@kylino.cn&gt; - 21.11-65" date="1712577600">Add add-rte_eth_bond_link_monitoring_get API in map</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-66" date="1716897600">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - app/testpmd: fix crash in multi-process forwarding
 - net/hns3: fix offload flag of IEEE 1588
 - net/hns3: fix read Rx timestamp handle
 - net/hns3: fix double free for Rx/Tx queue
 - net/hns3: fix variable overflow
 - net/hns3: enable PFC for all user priorities
 - ring: add telemetry command for ring info
 - ring: add telemetry command to list rings
 - net/hns3: support power monitor
 - net/hns3: disable SCTP verification tag for RSS hash input
 - app/testpmd: fix RSS algorithm choice</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-67" date="1717416000">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: support new device
 - dma/hisilicon: remove support for HIP09 platform</changelog>
</package>
<package pkgid="c83b6b7a4169700d312de3ce9d4dbe5b252eb5356cb3b8eb3603e427b9b6a4a9" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="77.oe2203sp1"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="a77f8a23886a2f2c972235ed15890037662a36f44bbfbfa9c39381e2f92c7048" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="42.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-33" date="1676980800">refactor Rc/Tx function of hns3 PMD
 And patchs are as follows:
  - net/hns3: fix burst mode query with dummy function
  - net/hns3: add debug info for Rx/Tx dummy function
  - net/hns3: remove debug condition for Tx prepare
  - net/hns3: separate Tx prepare from getting Tx function
  - net/hns3: make getting Tx function static
  - net/hns3: extract common functions to set Rx/Tx</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-34" date="1677844800">Support flow rule keeping capability for hns3 PMD and
 testpmd. Patchs are as follow:
  - net/hns3: declare flow rule keeping capability
  - app/testpmd: add --disable-flow-flush option</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
</package>
<package pkgid="19be6901e9d843494e100ff2f14fe946a5ee416b674609669cd5a6f638dee58e" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="44.oe2203sp1"/>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-35" date="1678881600">Fix some RSS bugs and reimplement hash flow function for hns3:
  - fix some RSS bugs and optimize RSS codes for hns3
  - reimplement hash flow function for hns3 to satisfy the
    mainstream usage of rte flow hash in the community</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-36" date="1679572800">Fix a m_buf pool was not freed bugs for test and support
 CPPC cpufreq for l3fwd-power. Patchs are as follow:
  - test/mbuf: fix mbuf reset test
  - examples/l3fwd-power: support CPPC cpufreq</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-37" date="1680350400">- hinic: free tx mbuf use rte_pktmbuf_free_seg</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-38" date="1680350401">- build as shared libraries to reduce the size of debug packet</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-39" date="1680609600">Sync some patchs from upstreaming branch and modifies
 are as follow:
 1. Add private dump for bonding, virtio and vhost.
 2. Support LACP info dump for bonding.
 3. Display RSS hash key of flow rule in testpmd.</changelog>
  <changelog author="bigclouds99 &lt;yuelg@chinaunicom.cn&gt; - 21.11-40" date="1681214400">- Create a softlink to dpdk default driver path</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-41" date="1682078400">- Telemetry: support display as hexadecimal
 Sync some patchs from upstreaming for telemetry and modifies
 are as follow:
 1. Support dispaly integer as hexadecimal.
 2. Fix data truncation for some u64 accept as int.
 3. Add JSON pretty print.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-42" date="1682596800">- fix empty devargs parsing
 Sync some patchs from upstreaming and modifies are as
 follow:
 1. The rte_kvargs_process() was used to parse KV pairs, it
 also supports to parse 'only keys' type. And the callback
 function parameter 'value' is NULL when parsed 'only keys'.
 This patch fixes segment fault when parse input args with
 'only keys'.
 2. The MAP_FAILED should be used to determine whether the
 mapping is successful but not NULL. This patch fix it.</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-43" date="1684929600">Sync some patchs from upstreaming for hns3 pmd and modifies
 are as follow:
 1. support flow control autoneg for fiber port
 2. support simplify hardware checksum offloading
 3. support dump media type
 4. add Tx Rx descriptor logs
 5. fix Rx multiple firmware reset interrupts
 6. ethdev: fix one address occupies two entries in MAC addrs</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-44" date="1685188800">- examples use static libraries to avoid unlinked dynamic libraries</changelog>
</package>
<package pkgid="df2adb1dcb457b6494e8d4810a66016482fe5b48b84ffde6ac8eb5837b105353" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="50.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-49" date="1686657600">- pdump: fix pcap_dump coredump caused by incorrect pkt_len</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-50" date="1687176000">- gro: fix gro with tcp push flag</changelog>
</package>
<package pkgid="5868ee88a3b83b79a5813825a2f30d84da39d672a4d262e9dc515d44babbd143" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="63.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-54" date="1689422400">- kni: fix build with Linux 6.3/6.5
- remove unused patch intruduced by "fix build with GCC 12"</changelog>
  <changelog author="chenjiji &lt;chenjiji09@163.com&gt; - 21.11-55" date="1689595200">Sync some patchs from upstreaming about add FDIR VLAN match
 mode runtime config and fix doc format for hns3 pmd. Patchs
 are as follow:
 - doc: unify sections of networking drivers guide
 - net/hns3: delete duplicate macro definition
 - net/hns3: add FDIR VLAN match mode runtime config
 - doc: fix kernel patch link in hns3 guide
 - doc: fix syntax in hns3 guide
 - doc: fix number of leading spaces in hns3 guide</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-56" date="1692619200">replace patch-287 to solve the duplicate setting for MAC address.</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 21.11-57" date="1693396800">- Add support for sw_64</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
</package>
<package pkgid="e4c7380c6d5f70a13f0bfd37c0461acaa61386d6363b623b21d43b08f1d7721d" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="67.oe2203sp1"/>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-58" date="1698408000">Sync some patchs from upstreaming and modifies are as follow:
 - maintainers: update for hns3 driver
 - app/testpmd: add command to flush multicast MAC addresses
 - app/testpmd: fix help string
 - app/testpmd: fix multicast address pool leak
 - net/hns3: optimize SVE Rx performance
 - net/hns3: optimize rearm mbuf for SVE Rx
 - net/hns3: optimize free mbuf for SVE Tx
 - net/hns3: fix order in NEON Rx
 - net/hns3: fix traffic management dump text alignment
 - net/hns3: fix traffic management thread safety
 - net/hns3: fix flushing multicast MAC address
 - net/hns3: fix error code for multicast resource
 - net/hns3: fix VF default MAC modified when set failed
 - net/hns3: fix index to look up table in NEON Rx
 - net/hns3: fix non-zero weight for disabled TC
 - config/arm: add HiSilicon HIP10</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-59" date="1700481600">Sync some patchs from upstreaming and modifies are as follow:
 - net/hns3: fix mailbox sync
 - net/hns3: report maximum buffer size
 - ethdev: add maximum Rx buffer size
 - app/procinfo: show RSS hash algorithm
 - ethdev: get RSS algorithm names
 - app/procinfo: adjust format of RSS info
 - app/procinfo: fix RSS info
 - net/hns3: support setting and querying RSS hash function
 - net/hns3: report RSS hash algorithms capability
 - ethdev: set and query RSS hash algorithm
 - ethdev: clarify RSS related fields usage
 - net/hns3: fix uninitialized hash algo value
 - net/hns3: keep set/get algo key functions local
 - net/hns3: fix some error logs
 - net/hns3: fix some return values
 - net/hns3: fix LRO offload to report
 - net/hns3: fix setting DCB capability
 - app/testpmd: ease configuring all offloads
 - net/hns3: refactor interrupt state query
 - net/hns3: fix IMP or global reset
 - net/hns3: fix multiple reset detected log
 - net/hns3: remove reset log in secondary
 - net/hns3: fix double stats for IMP and global reset
 - net/hns3: fix crash for NEON and SVE
 - net/hns3: fix unchecked Rx free threshold
 - net/hns3: fix typo in function name
 - net/hns3: fix build warning
 - telemetry: fix repeat display when callback don't init dict</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-60" date="1702036800">Sync some bugfix from upstreaming about hns3 reset and modifies
 are as follow:
 - net/hns3: fix VF reset handler interruption
 - net/hns3: fix reset event status
 - net/hns3: fix ignored reset event</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-61" date="1702036801">Sync some bugfix from upstreaming about testpmd and doc, modifies
 are as follow:
 - support set RSS hash algorithm
 - ethdev: add new API to get RSS hash algorithm by name
 - doc: fix description of RSS features
 - doc: fix RSS flow description in hns3 guide
 - doc: update features in hns3 guide
 - doc: fix hns3 build option about max queue number
 - app/testpmd: check port and queue Rx/Tx offloads
 - app/testpmd: fix Tx offload command
 - app/testpmd: allow offload config for all ports
 - app/testpmd: fix tunnel TSO configuration
 - app/testpmd: add explicit check for tunnel TSO
 - app/testpmd: fix tunnel TSO capability check
 - app/testpmd: remove useless check in TSO command</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-62" date="1702641600">Sync some patches for hns3 about refactor mailbox and bugfix, modifies
 are as follow:
 - net/hns3: fix reset level comparison
 - net/hns3: fix disable command with firmware
 - net/hns3: fix VF multiple count on one reset
 - net/hns3: refactor handle mailbox function
 - net/hns3: refactor send mailbox function
 - net/hns3: refactor PF mailbox message struct
 - net/hns3: refactor VF mailbox message struct</changelog>
  <changelog author="huangdengdui &lt;huangdengui@huawei.com&gt; - 21.11-63" date="1703851200">The hns3 driver don't support QinQ insert for VF</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 21.11-64" date="1706875200">Add support for ppc64le</changelog>
  <changelog author="zhangmengxuan &lt;zhangmengxuan@kylino.cn&gt; - 21.11-65" date="1712577600">Add add-rte_eth_bond_link_monitoring_get API in map</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-66" date="1716897600">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - app/testpmd: fix crash in multi-process forwarding
 - net/hns3: fix offload flag of IEEE 1588
 - net/hns3: fix read Rx timestamp handle
 - net/hns3: fix double free for Rx/Tx queue
 - net/hns3: fix variable overflow
 - net/hns3: enable PFC for all user priorities
 - ring: add telemetry command for ring info
 - ring: add telemetry command to list rings
 - net/hns3: support power monitor
 - net/hns3: disable SCTP verification tag for RSS hash input
 - app/testpmd: fix RSS algorithm choice</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-67" date="1717416000">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: support new device
 - dma/hisilicon: remove support for HIP09 platform</changelog>
</package>
<package pkgid="c10e267a6e8391d622696c9e441cef130597dea99fb880a1ce1166d98d27dc4b" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp1"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="9eb8365b30ca021e7e6eaf1b0dbb36e68bc97ff6b3c7c6f362c4731c1d64d148" name="dpu-utilities-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3" rel="1.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
</package>
<package pkgid="49e0d5b34aa06763e28eb60af1790ef9f1b18ee02b00e9c30ad5421197c8ecb4" name="dpu-utilities-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-1" date="1685707200">- Upgrade dpu-utilities version to 1.4</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-2" date="1686571200">- Sync patches from source</changelog>
</package>
<package pkgid="45fabbaecbd7728e3200095fc575ce2e3dca3b790b046a4d48c6f69085b7dec3" name="dpu-utilities-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3" rel="1.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
</package>
<package pkgid="fecfcb6620969738815bc6c94e321e61efe24a7b7d0e0eb14b505c0ce38e097c" name="dpu-utilities-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-1" date="1685707200">- Upgrade dpu-utilities version to 1.4</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-2" date="1686571200">- Sync patches from source</changelog>
</package>
<package pkgid="b3d9666b227879aa1fe71784c1fb5e21cb4dfc21f4d272de243cfa30e2724922" name="dpuos-imageTailor-config" arch="aarch64">
  <version epoch="0" ver="1.3" rel="1.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
</package>
<package pkgid="958149caa55d2017714ad38ffe4e75cf23644790c247419a5619a61d448cb1d9" name="dpuos-imageTailor-config" arch="aarch64">
  <version epoch="0" ver="1.4" rel="2.oe2203sp1"/>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-1" date="1660305600">- First Spec Version Include qtfs shared filesystem Driver Code</changelog>
  <changelog author="yangxin &lt;245051644@qq.com&gt; 1.0-2" date="1660737600">- Split dpu-utilities into three packages.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-1" date="1669636800">- Upgrade dpu-utilities version to 1.1</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-2" date="1669896000">- add path put in xattr set</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.1-3" date="1670500800">- Sync patches from master</changelog>
  <changelog author="YangXin &lt;245051644@qq.com&gt; 1.1-4" date="1671105600">- Fix inode sync error between client and server.</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.3-1" date="1679400000">- Upgrade dpu-utilities version to 1.3</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-1" date="1685707200">- Upgrade dpu-utilities version to 1.4</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; 1.4-2" date="1686571200">- Sync patches from source</changelog>
</package>
<package pkgid="692a740090320883b67c8c9ff7d1c233729a965017f920b32ae6ecdb36daa99e" name="e2fsprogs" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="87a40ba3561afd5c15dba46abac0ab02b70e6f4442c9a5e53e509b9a2a5a8c61" name="e2fsprogs-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="8518ab7072bb999c60bc246cf04b7f3dc7397e8fcd9b5dbb51995ba946d3be45" name="e2fsprogs-debugsource" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="0e5f895e120d2f063fe9e06a7abf3f8cdad65a013db6f8a4dc81ef2342526df2" name="e2fsprogs-devel" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="1bd46ee9fcf28f61c955fc28252a0e01c4dc15f3e98f5d08b7b0d1d1b78998ab" name="e2fsprogs-help" arch="noarch">
  <version epoch="0" ver="1.46.4" rel="21.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.46.4-12" date="1656072000">- add sw64 patch</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-13" date="1660305600">- tune2fs: do not change j_tail_sequence in journal superblock</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-14" date="1660996800">- debugfs: teach logdump the -n &lt;num_trans&gt; option</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 1.46.4-15" date="1663934400">- test: fix ACL-printing tests from community</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-16" date="1665748800">- tune2fs: fix segfault problem</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-17" date="1669896000">- fix deadlock problem in unix_write_blk64</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 1.46.4-18" date="1675944000">- Upstream patches regress for debugfs, tune2fs and mmp.</changelog>
  <changelog author="Zhiqiang Liu &lt;liuzhiqiang26@huawei.com&gt; - 1.46.4-19" date="1680177600">- backport one patch to fix: processes may kill other processes in misc/fsck.c</changelog>
  <changelog author="tangyuchen &lt;tangyuchen5@huawei.com&gt; - 1.46.4-20" date="1686312000">- delete invalid link for ext4</changelog>
  <changelog author="suweifeng &lt;suweifeng1@huawei.com&gt; - 1.46.4-21" date="1687694400">- backport patches from upstream</changelog>
</package>
<package pkgid="782c8a0fb1be5f9c5eb44c1cf602c8dffd967cafffbd51d5b28974e98382122e" name="ebtables" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="cd98831e02e36f982969397bd36f6ca4d6051c29ace929b39162dcf6b2a5eb21" name="ebtables" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="11.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-11" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="d406475682f684e26a665598bad49584c007d33552779e29bed8a79c3a24ef37" name="ebtables" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="0cce957c2eb0ec381c5a5e9eba0dbdd936f116695001d3ae8bc1fbffbe9e3b23" name="ebtables-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="e675e3cd4018561b912d290c1ed252c9b967675d8ca20d7beaa6f2e26b068721" name="ebtables-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="11.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-11" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="c2959e136962edc6232b8ef55453dbd86fdea6c3111103da1ee65a6db8f9fecc" name="ebtables-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="3ca8900ef405617ce3cfcf4901adf72c6013b426d01a1d609df5dafcb2e5fd1f" name="ebtables-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="01d887f64ebf17d407a690a4979d725cf3e497100597d6655cc2a79e7ce7ab52" name="ebtables-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="11.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-11" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="de1f3c3a68394cd3a9c7c5427bc6341ace75bba3a7734c8d65904197fd962174" name="ebtables-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="0f19c46812e71fc061e596d044841fc79dec8fdade7c4e6e3d3ca70d7dbf9de5" name="ebtables-help" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="10.oe2203sp1"/>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
</package>
<package pkgid="e677656b5c7929df11e834f4eba3a542bb9c81e365691fbed80b33d028331864" name="ebtables-help" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="11.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-11" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="d140cbac62fbbee349e2c7f73be7a576ac3ba836fd54e4473fbcee3c6c59d9a2" name="ebtables-help" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="9.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.0.11-2" date="1631016000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove runpath of ebtables</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-3" date="1646827200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string-icase can not work</changelog>
  <changelog author="wangxiaopeng &lt;wangxiaopeng7@huawei.com&gt; - 2.0.11-4" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:del broken lib</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-5" date="1656936000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-config file access permisson
       fix ebt_print_error for prints null</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
</package>
<package pkgid="f1bcf3896a804ebd7ab721b4b444b73deae6ec77e8d6c75daad5a626bd652f59" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="d87ea9fbd413d5679783592bee65276974fa752170d8abf8a22be96080b3aca0" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="564b64ca0fa188f9b65822efe0fd8b269ee67ca8f557a776a331d1e584e802af" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="d8a51cf84d135f70c10515c7db5628bb3d7cc79e0d72ddb1114e21d9fad191f9" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="b7b2d12bc3b2f891cd82aa9074b76fd4bb3c6ef41f151bd1b1c926ea9a82818d" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="dd450c798768e305378b63c6dcff4e293fa6cab9ac72df2dbd2089a8445f440f" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="18.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1718193600">- fix CVE-2024-1298</changelog>
</package>
<package pkgid="fe0bc6d6291a570dddb0a5dc3a88b74b9635fac5f15967ff306a0ee6b3d7146e" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="19.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="ec22f518857a5a2b6e2c7c75ec0682b3165e3f35784da0ec66613806f0efa11f" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="20.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="19ff05eaaadf1b786b439d832fb0311c627c11ae55926cd63de87ed4a9fca8ae" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="21.oe2203sp1"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="4c25a792caeb6dd890cabf4830927dbaaf34fcab4969acf9985d0d2a189a522e" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="22.oe2203sp1"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="e35f2e08bf4fdbdb57ab7692eaf6308ea49cca30c6c98c53c0263746ba225c97" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="0d785c9f9d1dddbca9c94301e2ff666fab6638912560bc466aec8692942deec2" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="1d44d7fc2db37a081fc19d549443677aa6cbf0e535d68d898dbd989419d69b4b" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="ba356fb30e383cd0ecba0349618aad8f97c13e80f2bad5d6f061acc5e3fe8ef8" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="8546d808fd105c4e93a07bdc7a5f4c6890f052f909dd95146afbbfce06c69603" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="4f37ddc1536da5913988096efe396a6462a53ce9a4c07d82f6707763b8a30e8e" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="18.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1718193600">- fix CVE-2024-1298</changelog>
</package>
<package pkgid="911a4cc1f8c7937b342c12fa0b71450b557326f3763a686ea6d3a9f79e686852" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="19.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="e16049d967efafaa1186af7fd5ea29431d1b61997cd3b1fff0163d2f11714b74" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="20.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="d776bfb40ac2be41d969104100bf39023b5a7710f700d9536ec44aed5fff4bb7" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="21.oe2203sp1"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="9dbe416b72f9f681a9e264c59a6d30a5c5fe66f147ad8038da2afea8b5cb4ed4" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="22.oe2203sp1"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="39862c9cd0dbf4ec508ada4c3f32bdd577907ec415e174345a4f2bd50dc8a0d9" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="b0fbf20113f59acd83f5cfe7eefcbb61e36b36fb94798c2ee832236550f2c2c2" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="c5a00ad0eaa4c99d271ebdfb9a660be4357f75dce32e20a528747620898c1c3e" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="ce5560e6ce1a56c5ece8e8a9c286551330cc450fa9d0e4a3ae1549ef0fde7424" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="d16fa1f9f4227b67872570f5a9aec79419d26b7eaa09ae243b92e4f93129c9a4" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="c816effc03c4bb9e87246c73237fe145595139b2eae567b844562193f114e67f" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="18.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1718193600">- fix CVE-2024-1298</changelog>
</package>
<package pkgid="f55f8168609ecf51ffedba6d864849a533ec097679ef2f03512dfed83d11090f" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="19.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="b9aae7d4c137e69b5e48b4abd1b9ab84c482f5c71afab3cdb3c50fb580742cc3" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="20.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="41bd09b2031e0074295e865855a0b748d395ab17ca0868ea6815e9aafc0fca65" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="21.oe2203sp1"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="e2c44d7c8edb68199833756e10d0da5649e266651e07c21d7f4c6697b757f74a" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="22.oe2203sp1"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="3dcb29e349ac00a43375c0a0ac625c6b6d2fffc01e613d68d4c2922c2eb48b16" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="ada0d7c17a7d2e725cbec70f6220e114bbddcb8258e1e857563ae80f4cddc004" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="29a5b447de27cacc978a65aff6a6d492dc01ad3586ce033ee6ecca36b04d750d" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="7e807ec457b068f2d5db89b9081606985aa345eee3fc03b797cf50fff7599d87" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="06043d8797b65bb482575313e6879cb88c467423704c44986e7da878deed45ad" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="e1cbc5f8f7ddbf7dbaad6af0f9e85b9aeef120f313aa857eb90bde72ecf8a1ca" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="18.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1718193600">- fix CVE-2024-1298</changelog>
</package>
<package pkgid="ab1e54a0a8fd0645f0991ba5ed3e0b94c9b9bf48f3b09fa02d50ad8f42d85242" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="19.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="da17926729ebdda83df5916f305dd6103ec3c7427871042f2e6b36081026013a" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="20.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="f78e0b037ee3b8e3173402a64859734a9812d31c6bb210c194f0599da7c2138c" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="21.oe2203sp1"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="9da942606b2d61a7215cc6aefd3a8d1f895b87756f7277b79068600d1e35f4ae" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="22.oe2203sp1"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="bc4fc1d137d92bfd0bda44b04be47c64af482a613e7374825447fbca045e1e0f" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="11.oe2203sp1"/>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-2" date="1644926400">- fix CVE-2021-38576</changelog>
  <changelog author="Jinhua Cao &lt;caojinhua1@huawei.com&gt; - 202011-3" date="1645099200">- OvmfPkg: VirtioNetDxe: Extend the RxBufferSize to avoid data truncation</changelog>
  <changelog author="yezengruan &lt;yezengruan@huawei.com&gt; - 202011-4" date="1651060800">- update the format of changelog</changelog>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
</package>
<package pkgid="37bb969d133d26a9868610327bbf20a0f9488c1265910bf78b93bba9cdd898c1" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="12.oe2203sp1"/>
</package>
<package pkgid="83096cade957ebef150ebeed443407f7611e4f242afe3cf80358c5b0b6c6f98a" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="14.oe2203sp1"/>
  <changelog author="miaoyubo &lt;miaoyubo@huawei.com&gt; - 202011-5" date="1655208000">- Enable TPM for pcr0-7</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-6" date="1664452800">* fix CVE-2019-11098</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
</package>
<package pkgid="8779163202b5f1c8bf227eed1112dab77e28694fcdcd5c9ecfdd4385526d0237" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="16.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-7" date="1669723200">- fix CVE-2021-38578</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
</package>
<package pkgid="05c38f5b2e4687031137f6d7de68dffd2515f406f0daf6d596a28d227c8ff745" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="17.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-8" date="1676894400">- fix CVE-2022-4450</changelog>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
</package>
<package pkgid="6d104976c5de51bda93df4891ee5af1753cf4549fbccb242ad50f2c7bb9b6981" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="18.oe2203sp1"/>
  <changelog author="shaodenghui&lt;shaodenghui@huawei.com&gt; - 202011-9" date="1677326400">- fix CVE-2023-0401</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1718193600">- fix CVE-2024-1298</changelog>
</package>
<package pkgid="61c9af7f2ec3415d568c5dcc8696b27fca22e2ace88e488eada27f2e680ebbb3" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="19.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="e637a643549f7e31e4e0962e12b7a936b95d17c16cf22878307bbdd757a7bab7" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="20.oe2203sp1"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="18dc2f25c42649a92f5abc3c5d294103fef861e359fd87cb790b77575a60af1c" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="21.oe2203sp1"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="c56d8c680f6645fb8ae0b0806834b1656b7cd49bf219245b714f89fcf81dc4b5" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="22.oe2203sp1"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="5c93b4ee4abf7e6742194e8ebbf2d5c16be8a1796c273be965c437b4db342281" name="efibootmgr" arch="aarch64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="1a7188b96c4cf6214897ffc7168d1681eabbc967993dea94c15a3507416b3709" name="efibootmgr" arch="aarch64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="fa617d47ea36ad1e43d72fa36e8fd5f91dbd2cce28e5d6544764430cdf5746ae" name="efibootmgr" arch="aarch64">
  <version epoch="0" ver="18" rel="5.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 18-5" date="1718625600">- Fix the incorrect long parameter in help messages
- efibootmgr: delete_bootnext is just a boolean, not an entry id</changelog>
</package>
<package pkgid="f54bf92ef9c0a9f8f745e9d2ba664baf29a3b6229fe74945b963130a35c43d96" name="efibootmgr-debuginfo" arch="aarch64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="fe3f8aea23486b55ecbf996671a23e69ae5cf1f825ea7d255b6940b3d37372c6" name="efibootmgr-debuginfo" arch="aarch64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="368d67463b76a294687ca9271e62ef5b624ba3c517f586c772c17a728b7d0d16" name="efibootmgr-debuginfo" arch="aarch64">
  <version epoch="0" ver="18" rel="5.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 18-5" date="1718625600">- Fix the incorrect long parameter in help messages
- efibootmgr: delete_bootnext is just a boolean, not an entry id</changelog>
</package>
<package pkgid="ec942dc4a792ff2cfce2ea522b3d8b93b4726f21b76bac5e3832d3daaea7051a" name="efibootmgr-debugsource" arch="aarch64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="3705997b7a9f025625f6eea7d2c903f06cd0f5109b29c7b18a4591e83bd17cf3" name="efibootmgr-debugsource" arch="aarch64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="9c904ce93cbef2935a7c0934da4f18f8ac125b66f4dbd3b8c6e26da58522e0ca" name="efibootmgr-debugsource" arch="aarch64">
  <version epoch="0" ver="18" rel="5.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 18-5" date="1718625600">- Fix the incorrect long parameter in help messages
- efibootmgr: delete_bootnext is just a boolean, not an entry id</changelog>
</package>
<package pkgid="883958afe1b5bd08b37673d7123e8a7ce8e754c7b79d4b16b101fbe95bdc02c7" name="efibootmgr-help" arch="aarch64">
  <version epoch="0" ver="18" rel="3.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
</package>
<package pkgid="679c78fe02f4b4158c3f02838518b7307d6f142c0bd2eea1d79fb0350b3210af" name="efibootmgr-help" arch="aarch64">
  <version epoch="0" ver="18" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 16-7" date="1622030400">- Add a BuildRequires for gcc</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 16-8" date="1623153600">- round community patches fix memory leak</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 17-1" date="1624276800">- update to 17</changelog>
  <changelog author="yangcheng &lt;yangcheng87@h-partners.com&gt; - 17-2" date="1650888000">- rebuild efibootmgr</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
</package>
<package pkgid="44402cfafd9d5d92620be05f26d6cfc822aea5fd13fc29690f43ad86da8fde7d" name="efibootmgr-help" arch="aarch64">
  <version epoch="0" ver="18" rel="5.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-1" date="1666094400">- update to verion 18</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-2" date="1669377600">- Fix the wrong url of Source0 and modify the name of the source tarball</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-3" date="1676894400">- get_entry: return entry if it was found before reaching the end of the list</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 18-4" date="1678708800">- Fix segfault when passed --index is greater than current boot order size
  Add missing short option handling for --index (-I)</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 18-5" date="1718625600">- Fix the incorrect long parameter in help messages
- efibootmgr: delete_bootnext is just a boolean, not an entry id</changelog>
</package>
<package pkgid="737091981fb175a687f07d5ddc545a10941586b4f78dca59e9cb70ae8de2434c" name="efivar" arch="aarch64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="c2c7c047cb0585f73f6d0d8f426a347d807983a8b4f0bcf17e2afdc3008ad977" name="efivar" arch="aarch64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="2c7d4c7547493c2ca464b8ef0923f398236d8a3480a940668acb07ce837ea8cd" name="efivar-debuginfo" arch="aarch64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="7c6b43819d1764ceae59b6e363b71200a1eeb698f2716ad68dec310ec21374f2" name="efivar-debuginfo" arch="aarch64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="2707e67089acea919427ce60db488b51c3e482f54c0bc21d18e35c60f2db96e8" name="efivar-debugsource" arch="aarch64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="3e4005d1cca90e0bc5517847169183c0c3bf7aa2531b574064a5887d01ca0388" name="efivar-debugsource" arch="aarch64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="cff28e3b11c76e1141c858d7735e6557d3e55efe6680e5e9dc78b87d29745c88" name="efivar-devel" arch="aarch64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="cd7e22de90bbef034749d49de1f6a58569cb6f93ae5ecbf8eb58c82226ed2636" name="efivar-devel" arch="aarch64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="01618b2e15d2094d89f0cd81536dc862143244bfd18efb33cf28e9d9c76fc850" name="efivar-help" arch="noarch">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="42f2b71b3391f7e0210b0c7b4cc4d65e404d6daab247826974f6e2f6d3f90500" name="efivar-help" arch="noarch">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="6ade3ceee6cff90903661821de0c5d1b388052781dfbc48b42371a038d43b829" name="efivar-libs" arch="aarch64">
  <version epoch="0" ver="38" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
</package>
<package pkgid="3ceabe06426e434987efe50e6f2d7f62ba1228a04c8a9fff382387f9bc6d8c71" name="efivar-libs" arch="aarch64">
  <version epoch="0" ver="38" rel="4.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 37-7" date="1648123200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix efibootmgr -v error</changelog>
  <changelog author="mylee &lt;liweiganga@uniontech.com&gt; - 37-8" date="1652702400">- fix spec changelog date</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 37-9" date="1666180800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-1" date="1667822400">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update efivar to 38</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 38-2" date="1682510400">- ID:NA
- SUG:NA
- DESC:fix sw_64 build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 38-3" date="1694520000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dp.h: check _ucs2size in format_ucs2()</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 38-4" date="1710331200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix invalid free in main()</changelog>
</package>
<package pkgid="c5ed661c1fc5c0538f7e48716ae3638b62034e08b584e6d4f6936c2c937b3926" name="emacs" arch="aarch64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="227ee328b57d0db46c0e1b2198c3399ffe34c76318754a57bf5fce87d8e8953a" name="emacs" arch="aarch64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="f0d04c5381b016f5157802231fceb37da80b4f953e02205b43a7dc56332c4a68" name="emacs" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="615297c7821fca3d3024e9178e85240024bd90e37018858d587b0741f0096fd2" name="emacs" arch="aarch64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="8599051e76aefae6f154bb0887a13f0a36159966d9fc1f598d182bde9aef321b" name="emacs-common" arch="aarch64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="f8366ad7d21579ab3ea9a89241f91a03f6c8451ab1099c82f6f7ee9cfeef1f22" name="emacs-common" arch="aarch64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="33adac41a5ce8ebd5a5cdec80e93bcf3a2374b159cb5524a152bf6888efa3cd6" name="emacs-common" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="0024db327c7777c452f41b45677c10312c861553b67e0eae810d9f965bd98ae2" name="emacs-common" arch="aarch64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="598fb1b3ead8cc85d09f50006260cbc85c86a42edbd6d388991fbec910a66f68" name="emacs-debuginfo" arch="aarch64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="4143a4402316ca92b45d19c27451f66d9eff93abf4237bf5bf28729dcd4493d3" name="emacs-debuginfo" arch="aarch64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="08275709c2eadbe489195ad07c44ef0ec89cc5ab57990d2b10656f2744665659" name="emacs-debuginfo" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="699900634b479db743a1d6d4e3a838f0143850fb8205ec045bb40e1ac5bdac6a" name="emacs-debuginfo" arch="aarch64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="0c119b5f0c2eec61172c5af4374a6cbfb8c7f0f09d7961fec8981a3ec646ca7e" name="emacs-debugsource" arch="aarch64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="930b3ea19b9af77445817abd63b5e41b4c5b372e052fb2028497a46038402ffe" name="emacs-debugsource" arch="aarch64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="730fb3016032f2d96f524f476434e9a7820313e1c5f5865a9da745624ed11dbd" name="emacs-debugsource" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="4f6ce3385192058be52819d028f02f667f2b8c7383d1b7084fe09acebfe21f78" name="emacs-debugsource" arch="aarch64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="de50644f4f7be53f8a922d3748794621cb88dcb570190a1de3567a31137bb31f" name="emacs-devel" arch="aarch64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="ae8cfcd5e1cc97aa3633306612ad9bae4515b8412ba86f797d83f026a1097689" name="emacs-devel" arch="aarch64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="8322bd6067711dcef8d5204e4353225e4204096f4bdd139fc211b92c2d27075c" name="emacs-devel" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="b6c8eb4eeabeecf402fdd31aa87cde9ce27553fd7701eda00883a03f5add06aa" name="emacs-devel" arch="aarch64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="1eb284a447854527afc4c40ace610bdf7a53ddf354dde1bf769afc3fee433933" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="d0ea981477954722d6c4b2fe395c9ff4d2502a7b855898a75e5385fbcc113d07" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="e1e859ba275ed8d79c6293c11aeee4f99a394cb13f3b3801dc3fa2473cf102f7" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="21111dac793ec65c8e09840e43025464922d5e08566c062eea500ee7380ccf6b" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="62e176b6cca3e1478756c76a58932625f5578a9dd88db21fbc2506bc44c24c08" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="07a751af1e3096a26657e3edf716dabe96fb2fc0aab663c529a0c48e129c299d" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="3ea99d07cb84ad98a56e0d39e485eade0b4c55c91587f06ae5fb0f11ad5815f7" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="78bd67a38f0e8d7317354dd03b6510dd659fd6c73dbcdf78cf671138869f66e4" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="5b9bf99e392330dbf82ddd5eb7d17cece542815786899c5a4a6369bea5d7036e" name="emacs-lucid" arch="aarch64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="caeace71c7dfe5d873e23134edbf69a04b22462f09c898a14bd7ec8812d5e6cc" name="emacs-lucid" arch="aarch64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="b9be13cba88d160d030eaf9feeb079721a352090aebe3e1caf66d8c706ccb2e2" name="emacs-lucid" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="cbc1271ec0b9f1c97d99e758424516f63e0c7e6b110e7756c54b439427e7de32" name="emacs-lucid" arch="aarch64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="0ed40c4bb0d223015f6d9d91cffc9d65702c4512d6fdfb8a42f97072d85e4d25" name="emacs-nox" arch="aarch64">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="b44bcb421ccf7ed940c91df7288529836e6e60ef326e69b61e57f932222e6a54" name="emacs-nox" arch="aarch64">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="d4a24f947d7b7a9f7c793b5d15024c715e8a34203bc5f66996d77e9aa8050e6d" name="emacs-nox" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="4940b1e6e9ac17adc62d3fadb611a447088ae6d521ca8ea85ce9774bed7c4a39" name="emacs-nox" arch="aarch64">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="2a866bb226b6b8f2f7a197273ab8e526dd0ea8ede0ed8d3ef434c8bb11327156" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="10.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
</package>
<package pkgid="85cc1c378d0b1157ea7c9c3216fb4137814549f7a053e72ffbb06416aade0ee6" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="13.oe2203sp1"/>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
</package>
<package pkgid="e4c979894a372ebc874190398ff9c87e727b9053db0e0239d00a60ee0f6aba4b" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="14.oe2203sp1"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="bf0ff7fba2909ae040377aa8b877dafd8e6be6b7d795da41fbd7ab3c8c7da08f" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="9.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1:27.2-1" date="1626696000">- DESC: upgrade to 1:27.2</changelog>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 1:27.2-2" date="1628596800">- DESC: Fix FTBFS with glibc 2.34</changelog>
  <changelog author="yangcheng &lt;yangcheng87@huawei.com&gt; - 1:27.2-3" date="1628596801">- DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 1:27.2-4" date="1642420800">- round self-developed patch</changelog>
  <changelog author="wangkeorng &lt;wangkeorng@huawei.com&gt; - 1:27.2-5" date="1654948800">- delete macro in changelog</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
</package>
<package pkgid="872abc9725ce4031b0f10c13f7105ec9ff27c71148d6f10e10200805205f2a67" name="epiphany" arch="aarch64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="59674dd5c54baff9a323cef2e455334e7ba6121f0398997c9fc1f6aaa682f5fc" name="epiphany-debuginfo" arch="aarch64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="0ecac1208edc92fd847638cf1b4667f2a7f85fb835dc9c6621fc17023b45bf62" name="epiphany-debugsource" arch="aarch64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="5b79729715be8bee78646bcba9a45b7336e8f47f0b48d8d96f67ee707f21aba1" name="epiphany-runtime" arch="aarch64">
  <version epoch="1" ver="40.6" rel="3.oe2203sp1"/>
  <changelog author="Wenlong Ding &lt;wenlong.ding@turbolinux.com.cn&gt; - 3.38.5-1" date="1624536000">- Update to 3.38.5</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 3.38.5-2" date="1631275200">- Delete rpath setting</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 40.6-1" date="1651838400">- Update to 40.6 for fix CVE-2021-45085-to-CVE-2021-45088 and add patch for CVE-2022-29536</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; 1:40.6-2" date="1662724800">- fix issue #I5QHPI</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; 1:40.6-3" date="1677153600">- fix CVE-2023-26081</changelog>
</package>
<package pkgid="96c38424142df1697f84587e264054946d413a1a3e13476d81a716fce5a2d9f3" name="erlang" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="0aaed3bfc747c302ac351ab9239318bae435bac799aa899789a5f41794c48b4d" name="erlang" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="3607691231e67ae25c8e75d9ae36235057040154a9bd60b7ef3344aae51a85c8" name="erlang-asn1" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="d74d4c49fd8371f5fd4b956bfa4a6ce99a8cbe2b6f73ac3502197080a3e9af63" name="erlang-asn1" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="14e867cb55256617d793584d8ece0ca39a1af6c32e1ac40669d4831d4d1dc2ba" name="erlang-common_test" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="fb41db63261fc13427d783e32d44960f16a89a2c438dc204a136e6e7790c8138" name="erlang-common_test" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="6772c24693e1f31f883e5ea0c212837bf0862d1bafe556ac0199a6a343ad2f07" name="erlang-compiler" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="16eba5f4fa49673d33490a018f4778a121c0b1159ebdf4c06bdf3816fa79116d" name="erlang-compiler" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="4ad5fef3d823646ab47a12eb82b04e619999be3dca0dba3b8462a923cc2829f2" name="erlang-crypto" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="5455ebea535090658ce1edb3e4da87a973ad8d8de262e7d60bef76c702648c4a" name="erlang-crypto" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="de177b573782d4904d6f6f4487a6b702ce74c7d2d78b7fb45cfef1e64b803f3d" name="erlang-debugger" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="9af2fb6b1339921a8b523ebcb0f7f0684f009a19bd10db0e79ded0e14479f5b2" name="erlang-debugger" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="5b908189ba4cda35973efac3945907e09184c5edfefd30b192d2bd15c799c5cf" name="erlang-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="e877fd2245899502eee1294e98a044019ef053bc3190933ebfc784055e544007" name="erlang-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="2b858a7ea633380145bd14337c5c1eb963a20545c35dcae456cd58b3e8a35985" name="erlang-debugsource" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="ed1c225d60bcf3cfed17a41b713e620ab8db26553f3552bc375b6ae855480d4d" name="erlang-debugsource" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="c1b7959fe2bde11ebd487a2bcba5767241562e029141c65179e9753d6fccc5b1" name="erlang-dialyzer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="f48075278ef369a811703f13dd23b9fa6ff194c4a81cde4cd9cae348063afc3d" name="erlang-dialyzer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="50398fc9525f559906d4b2c564241a9424c01fb83b9a6b75989b9513b2b1aed0" name="erlang-diameter" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="45ebf8ce37de73c9c0e3d8445ae9693405538dde1d1b7940d7ec48f9c1589364" name="erlang-diameter" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="b2088dd591669bd2d794c2f6d5ee964acd76412e3c93e3a1ca08ba8386a7bd03" name="erlang-edoc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="3082f1080dfa149f6a32e28ccd48d5f7f2b9a23a5b68d33af08f22f135cd8428" name="erlang-edoc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="81e2c61262f9b2ce25ee7e54ff05e02c9c054d5e9617b8966f21787e64d4b698" name="erlang-eldap" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="b78e3678dbc910747652ea22b6e4cda812dd429a22b4b176d3623c41b8256cb5" name="erlang-eldap" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="7acbfb92bfdb36c493996074a9cc2b95144bfbb1795f4e615f878d6429fc62fd" name="erlang-erl_docgen" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="3966fff12bb1a0c50f1673f0254d394fbf81e4cd16a944387cffa8874b3274cd" name="erlang-erl_docgen" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="fe16392455cc886b6355463dd0932493b78f4e861657c5d7dafacc6019e1c09a" name="erlang-erl_interface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="790fd236f335a18e87a7bee40b77e2460cff2d1b410645aa6ab32a7c8cb8e9ec" name="erlang-erl_interface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="727e8c966ce2a85b1807d9b8c27e3d269a95f9ab55f3519c7332cc8008960871" name="erlang-erts" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="768aa65f86ff08519313aef527a97c5d0c5855045b138325159fcb928908dcf0" name="erlang-erts" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="7dee422f95ca571f13494d5e20e4997834774fe5b6a874c6defaff5e1caa3f91" name="erlang-et" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="ede854804f2833263cfc213f263f696df174d8c9f034aff29e192a2455a7e552" name="erlang-et" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="3077df9998a4aa0d03e29235e955776d2b4e1c47a44b91344bb73c5ee06de16f" name="erlang-eunit" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="aa368ee4ae896779ccb60ada1c31f464419e79a66aa4a3ba491233a35079feb7" name="erlang-eunit" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="f480b5d1cb556554b53ef0c06b13214b2b1030b3018c9171f902a1d375c583c1" name="erlang-examples" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="6c091c884ce025b3727da248c611836c2b9e9fef8a09c81de904e47e2e5eaaa3" name="erlang-examples" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="0e6290be7370deeb39c52fd4de402c962b029063f41274c2d88ceb28bfcc75b4" name="erlang-ftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="403e937b9dab157e665f38da68733ad97c4d18e7635771390bf780eab4cc3361" name="erlang-ftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="6e93aa95a52b5402284a9353546913533bea47c0f5180471cb56740b257488d6" name="erlang-hipe" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="7a881fb55d0d401c0ad34114e5e76205dc79c594c59c6e99f9d1df2d6fc660b4" name="erlang-hipe" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="73e8e737b106882b9c55c00f13a9185321961bcc43e7510e2f185181e7e79880" name="erlang-inets" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="372efe4f37e81f15c86e6c78ae2064ef066531eb615ec3bffaa7fcc1075c631f" name="erlang-inets" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="0ce8d15b53dd7ad6a8fcca33a245d6bf0d3252d9e7241db5eaf74541e37f6d37" name="erlang-jinterface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="99e8bc851299c7c0412a2be1d12c6c29aa1985da6940f9a60168d5faafc9c3d4" name="erlang-jinterface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="e47dba8e5c8b8b4ed131ce90bf3463eb408cae8a4ae38973bccf7009eff6e5d1" name="erlang-kernel" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="d72b14a380ea03055c2077904270b30f5dda9bf586187cee4e647454a34a8f10" name="erlang-kernel" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="d18d390a73691557cb4594088c9725a671e60c0cb681eb557ac04f344034fa5f" name="erlang-megaco" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="a6970a468445ee2d54380ad13e8d10098b3bbf2dcebe02586a88e09058c044fe" name="erlang-megaco" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="b21cd12fea66d904b41fea269e01b7186bce1a50a3ac83c8091a702469be161e" name="erlang-mnesia" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="c76c513550bac3ea015745614c35245f53bc6dfdf78f1837c264db095deed06e" name="erlang-mnesia" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="31c649683e7390db4fafee237f18ed30d40adc2004802aa933f13661a1431039" name="erlang-observer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="40c2f3614e41e67d702fe77726b667ee19b9568f026c4f570d6098837b9b4cdc" name="erlang-observer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="cf0a62b37c0577d05800f24489e6b27d6a9525c7ef0599bf28e230f9f2b854b6" name="erlang-odbc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="faeb460711d6db6f5f56a886877d0eb2f84a5923851446bcb9acf360d1037ab4" name="erlang-odbc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="f982bea9773f81ff88ca32ea100cdd58877d1702b61e55c5f3c433bd12d8b312" name="erlang-os_mon" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="7e775c3215db7cac5c3487df513af2c3e5d685b7f038b76f3f6a48d2f717bfac" name="erlang-os_mon" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="25043a32d7345da570ad7ed3e706bbb22b1924246386d205d86d057eebeeeb95" name="erlang-parsetools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="076b65d4212cd7005c19b20915af99292756951a6ff727c682d73f144b5b1157" name="erlang-parsetools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="ef8a5cdf8f08aaca8e249cb095cbc5ccc255b1270e34d8c6fa77674ecee903ea" name="erlang-public_key" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="182ec5f74aa40c8ff037e75611286bbd3d64f23270e2b892b2d9dad2d0e9a45b" name="erlang-public_key" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="5e9887458e26613a6f2cff9fbd68804d356ce8a51cd75e200eb5d07a04984c68" name="erlang-reltool" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="d3ecfa815f65fc558ad4b627eb11a72cf9435154d5264dcfd06ca8acddc334ad" name="erlang-reltool" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="e92d439f3f354c966f0120631ecc6b5b76287430dd54157c1587115537bb86be" name="erlang-runtime_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="5fb08f61d30575036758e2ae19fab1ca0a4aa7eaa70f2d30f4f6d9ff806a36cb" name="erlang-runtime_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="beb46574d510126f7b3d31d795d624a2126c0717110d2fc760319ae63832b552" name="erlang-sasl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="01eea82e7f866811b6543f963258c96c73b0a530e27c773e502db5a0ddb0618e" name="erlang-sasl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="287668041c3d8d2b80c26b0a2b5b1936d10b3b8ac13f092b9a5070242e2de534" name="erlang-snmp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="110c1f395e116b7fd3eeccf0d77c1b13dfcc3b5cfaabbd392201e5e0cc418423" name="erlang-snmp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="6bfe937101cfd26d1c367e8410dc0cc327843ceec11b474414f38c689edf3165" name="erlang-ssh" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="8f999cbea8a175263b927c23d74aa08083dbb66b145e01ab9aeb94ea0e279925" name="erlang-ssh" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="304b1ad4a868bf2600138e3b33f33a04c0cbcf8ce0bf2dddd13df71ceb46ac33" name="erlang-ssl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="522630191bab6c5fc65e69f921df0f38588e796c28176f18b123709ee6a95cfd" name="erlang-ssl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="09fb0ad5325daca8f83c87167dd3af28f68a994105e8ed3411b3219ecd09a0e9" name="erlang-stdlib" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="1e771ad4c30218347f3ae468caaab3afc3c02ed9443065437b3930f30d9c7f4e" name="erlang-stdlib" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="fa3896cc0967c559ecc52ab404599680be004f7a10a10ceb0004dcf118806842" name="erlang-syntax_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="21e2331dd914e830251cb8edf862ae182a6ea39ffb57265c7b779de9d35eb94d" name="erlang-syntax_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="b4a4c98177d199281fac73b0895ebabf6173145a6e943c31bc8999fc50f239a5" name="erlang-tftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="521fddc928daf54e37a22ad4dae81c8bc2eebfe6e64e26b51d9af047edb7fca6" name="erlang-tftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="adc9a60ef22626ef1f5698be45eb1a50ddc1ce7008561cb734d45bffc0f5e73a" name="erlang-tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="5176196e62bf3e9eff0bd6ca490e4cde77fb85e397b2e443b6fc3fd54b7467bb" name="erlang-tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="be73058d9318bbb75024d04184e05dc17f21a21d982a9692b85b438b4c9d4d9a" name="erlang-wx" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="8917bccb78db21949c9b8acb2bd4a08770cf5393f840759e2538ddb71e7cb93a" name="erlang-wx" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="fba53fcd720873f7585332e6bbb1d7a65513ae685e1141b13065a7395225732d" name="erlang-xmerl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 21.3.3-4" date="1641816000">- fix build error for autoconf 2.71</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 23.3.4.9-1" date="1642507200">- Update to version 23.4.4.9</changelog>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
</package>
<package pkgid="b614b161524ba6d88a19fa164b67ea81376567c47d60a1e6d5d9591ea56750de" name="erlang-xmerl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="4.oe2203sp1"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
</package>
<package pkgid="9ae866243f5a65781c19290ceca8196277637bff2260b5e7883e80fac2d03982" name="espeak-ng" arch="aarch64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="e07ddb6b5e027eab5b85e9a99725a0b14ce3eddc04a3bd20a5e94d4e327dd952" name="espeak-ng-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="e4b6724740d5b23790991046675a4db6d23dfab6100ba77112bac7475371b598" name="espeak-ng-debugsource" arch="aarch64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="5aceeb3e2e1f8f849909a1da943867b247e16d45507dec74a0c71fbf115a1b62" name="espeak-ng-devel" arch="aarch64">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="f91e411e72f05f53e016effff2d06b783f0f41a9007038ca239ac83cee404ade" name="espeak-ng-help" arch="noarch">
  <version epoch="0" ver="1.51" rel="2.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.51-1" date="1697716800">- Update to version 1.51</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.51-2" date="1703764800">- Fix CVE-2023-49990~CVE-2023-49994</changelog>
</package>
<package pkgid="2474e2965061b86e353dca87e8748df3b5e7edd4b136009e8f6acd41593cd17d" name="expat" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="1b4480a17e488c3846cbdf73bb8c27d2a05d05b2605cb82db6128685f7b447e5" name="expat" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="11.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
</package>
<package pkgid="f72b7848d77b7174cb25bdc444840b54eaa5108bcb640c4b8904c7176d03e8a1" name="expat" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="5a43522e06f6e15ef37f1f261badd736303d3d6f330fcbf04e77744b6e1a474f" name="expat" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="7030de206bad8435545d65b04e9257f94940785e15674ba2045807291ea0c6b8" name="expat-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="ffc22219c26ce32beeee0475c50be159abf3b406d51a9f81103a9d92498c29bd" name="expat-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="11.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
</package>
<package pkgid="cb64baaa1151a927d9612ae0e576b74a8cf1dbb1a089533dd883d2743aa67119" name="expat-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="90ca2573d67f6f5ce9ccea13c7e52b1ef48dd4b5d715be784cf2f0590ad968ca" name="expat-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="441ffa57219b4df0452572680e8007bdb8a30808091a06a853c7a2115129e542" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="7aa35fc550db1c3ff422e3243ded1c00f8107d1c0fed3945eda4f99504b1a78f" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="11.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
</package>
<package pkgid="8be7bfef91976d3bd0c0adba2e0d11590e6336464d816aefa712946d847ff571" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="5bed7a8b4a2ef499f548d179f733b6e3b2b13d51f602219b58908f93aed1b3fe" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="3a7b6827fa6ccd31926dafe55a6da3d81701b1eae7beab2e15b713daa293a63b" name="expat-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="b7e4858709a6206e19f4c375f8debbf81d28eca3f425702b7bced05bfb315a21" name="expat-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="11.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
</package>
<package pkgid="f1777db101f7e552a36a2a4ba7a40d4480399f9e89bd5d4774939913d44c8330" name="expat-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="b1d60767be8225cf242b631c03b8f7eceb920ad25176f3bd684bd12ca1991f99" name="expat-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="ce4b7be2ba50ce94c86174af0da7057e6c7c0720673952a11bb34671e74f27db" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="10.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
</package>
<package pkgid="fd7eaf1c373995277d26281ccb265c82b41f4949a8d14a9e8fc40a3bfa201436" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="11.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
</package>
<package pkgid="1ea1b940fe3ee7fba98e11928adbe10256d8f48147848a8853f9f44e22bfdf7e" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="a44e9c3d19d4e356aefafab45101c6d5dea922cee7a4228c53318ce05ae0c83d" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="751d98d965aebb6cc0d15fe4a22d874a9b05ee50a890f6ec15eaa59aa48b085c" name="expect" arch="aarch64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="93643cab21f71de5b85de21bf0d2ec5a8f290bb216fa8d89d79889beba11970e" name="expect-debuginfo" arch="aarch64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="989fc350fd56360afc842b19c6fe0ae2188da0b2e6e7064b6b00cbed54156a64" name="expect-debugsource" arch="aarch64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="add89dcc28c3f98b1049f36ef58666ffd73820cb1d7a8fbed3f36436f63d4c13" name="expect-devel" arch="aarch64">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="947cb5cf0e63f69639c63d4de60611e3e17bb36027ae31c842eb3c99d7b93460" name="expect-help" arch="noarch">
  <version epoch="1" ver="5.45.4" rel="8.oe2203sp1"/>
  <changelog author="yangzhao1 &lt;yangzhao1@kylinos.cn&gt; - 1:5.45.4-7" date="1654776000">- Remove unnecessary Buildrequires git</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 1:5.45.4-8" date="1708603200">- remove rpath and runpath of exec files and libraries</changelog>
</package>
<package pkgid="677c0e3a21f87b36baca6c5f370ca355f4e22ce5f3e33dc9de24eb3ae82a4e29" name="fdupes" arch="aarch64">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="fb930637523f5d9e05d4bc82755de53db6b8d403f75e6f15307d67ec3631468f" name="fdupes-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="10a084a00e48f9fa0d894633d0054d771e97298099c06dc1c7966450114a0c89" name="fdupes-debugsource" arch="aarch64">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="d175ff67dcd1d28b038a2cf39a385c0633ad76c582fd02ed30efd2985a6bade9" name="fdupes-help" arch="noarch">
  <version epoch="1" ver="2.3.0" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:2.3.0-1" date="1714305600">- Update to 2.3.0 for fix CVE-2022-48682
- Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
- Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
- Use configure script for installation (Autotools/Automake).
- Rename cs command ("clear all selections") from cs to csel.
- Rename igs command ("invert selections") from igs to isel.
- Add "prune" command as synonym for DELETE key.
- Clear selections after deleting files via prune/DELETE.
- Fix dependency issues when fdupes is configured to not use ncurses.
- Do not enter ncurses mode when --immediate option given.</changelog>
</package>
<package pkgid="9efe9e2a1c9155112698f4c222c624e2567f89b7c985be9f21c2bb27977af431" name="fence-agents-all" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="fcf45a32ceeb9fcccd17de9c904e9493060a0a7bc30a8b6494dd6c8d3131d75c" name="fence-agents-amt-ws" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="80a801f651502257eb64e7b7a0201507fd9391de4f0751f3cbeb4a35f0eb5fea" name="fence-agents-apc" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="06a4a6c6b1a1bfeae6e982d0ed05e82e4a103fdfde7f44fddcea8f37947e4dde" name="fence-agents-apc-snmp" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="e5dc95cb8a731243a0861658786d1e673eb909d59291debf787757971f02403c" name="fence-agents-bladecenter" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="f9060dcf81a7ffdbc05e6c3467f483d8198f7ab01a5216f9841cb13b3bc9f906" name="fence-agents-brocade" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="7510baf9a9a67f28fbc74495175f1a9e4382df3b05161ac82eedade7f81f2a70" name="fence-agents-cisco-mds" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="cc57dc34eaf565ca36bd4f833bb8f6d3df034e7430489de7227eb762f75c194d" name="fence-agents-cisco-ucs" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="3856f513339268aef60fd4e6013b15df757c22d156dadb7f54b2573195dab898" name="fence-agents-common" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="f950d300ad1764a21ea547fbc99e03feb3666c7874ba06d38ac43411aa1848c2" name="fence-agents-compute" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="4fe84b4bc3f0b74f6321cece620da6c695df199c2eb069dc217793e37699f97d" name="fence-agents-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="7db08d4315d8c02eaacee176d138b54bcd8b1087a9e88c548eef9644b0178d04" name="fence-agents-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="20fd16c725a7c97a42cb5fb3a939089c006c8514a41fd4cc4ec2bbb2c9ad9693" name="fence-agents-drac5" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="c56b2447db19ae3d3841114b34969319fb715f4c90b040f5163c4b5fabd84366" name="fence-agents-eaton-snmp" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="951339f344fd932c885d1ea019c0d508fa212040d9c01e9174443a4aa3087346" name="fence-agents-emerson" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="1fa3a123b74c352e0837a3a1edd38df099ade85e34eec13c6f5ddef31fcb025b" name="fence-agents-eps" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="3e379bcf046e94531706fb6facddd9d44dfe92d1e07596df68a0088c855ad938" name="fence-agents-heuristics-ping" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="9c32d60c307f6cedb687cb2003b9d1bdcc8f64db9af1d1417808b475efff59e0" name="fence-agents-hpblade" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="64e52e9ed3983d41b827830221f1751fcf8f274f8e04e25b35baac18f0db96b8" name="fence-agents-ibmblade" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="70e676ef17e0d10444935a8bfda6834ee49e8a0ef49b15be2cf1c2609d59c9e5" name="fence-agents-ifmib" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="f2e014e5e88e4772bbc52b4084df8426cecb9ba6a884af1a3843c1b2667e7b2a" name="fence-agents-ilo-moonshot" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="35173060d382177341131493195fa894a8623d50448fe5beca5de6368f0d6289" name="fence-agents-ilo-mp" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="b08e303ebe1f5c11fde5a17956f63edb3910a9914410966e65b249a53ff6a5b7" name="fence-agents-ilo-ssh" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="c8f30952db44948abf53692c2503aad9cad9cd855e49597e424545a9ed65985d" name="fence-agents-ilo2" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="544e5d05e7f188fe6956512a5e4589caa1bd7f04b72bac0b4ca60ad7faa75dce" name="fence-agents-intelmodular" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="53893e3c9f07aa77899f889d3d9a1f091b091306450308154abe9d02f6f4b759" name="fence-agents-ipdu" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="2c612ef243166cb03520a535fc9c0100bc5197b03b5a766532a10cf60d2fccbe" name="fence-agents-ipmilan" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="edbb0dfdabd5e7311adbf22efdc383c9b4716e2eb76ac2486f56153b57103e95" name="fence-agents-kdump" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="e9c760023ba74bf2c61cf7527fee5787258f7e703d2539541753ba6b7994207a" name="fence-agents-mpath" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="ab4888be0aa7cb535fe470cccb10b1f09c2033d3cce4c17437cfb242707a3ae6" name="fence-agents-redfish" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="29e2250f44fd573568c753bc4c6af69cf9df4da119ad17cc589670703b6b4c44" name="fence-agents-rhevm" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="14058b332e1c69ab94d6fecd1cd46429b455a6c730c087c761ef5a6c25cd425e" name="fence-agents-rsa" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="a0b042aa2bf5031ae5f2fb1c9ff25716ede2c3f261afec3d9cdd99b739a59e50" name="fence-agents-rsb" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="4d122a3973431eb00d48fc753d0e91a6504730964497e12f190e5a70331197be" name="fence-agents-sbd" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="49d45c7e05cb522e1f399cabe30b8f946a6c221c0e071c95b40b5bcea9353c0c" name="fence-agents-scsi" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="042cef5e4fe93f23342fdc8c2844e042c7997205eff0fe2d69e0fd165e8c5c32" name="fence-agents-virsh" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="12716a84961bbdf6613b94946f957d3e5b9eb3f64b47e061e7e6df21ed24751e" name="fence-agents-vmware-rest" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="68a2cf22f56d4e38ad3da97d719ae07d238d809c29a84aa8573ea20d81cba56e" name="fence-agents-vmware-soap" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="251450f922eb617aaa1108c2f42e5f1a02d1792583a97c138c71ef636d6c24fe" name="fence-agents-wti" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="33.oe2203sp1"/>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-33" date="1726228800">- fix for CVE-2023-52323</changelog>
</package>
<package pkgid="ae0d177fb7e9f0f94780ce41d16e7f76b431dc8864e8a7463ca695098bc28940" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="12.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
</package>
<package pkgid="be91058fd32ec8b5caa5765a04bc96f5bcb1236e4f113c2cbfbd80e53977aea3" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="4adbf9d69b29ee74d3e26bf78577b878b9073b0cbca4dda1b7fee3c4f273a24f" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="eebbc9ec83ba522a66846c591c78dbcffcfc9b58ceb5ee3dead3dc68969ad6ac" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="5b60e8f7574c3b6c585ef634b15059b51f398b9c42bd514904c257e415fcfa3a" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="8.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
</package>
<package pkgid="50871f9cbb5330a333d72d7420aa1b0d2e6a18c1e2cb26339e2923bb197d9f13" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="12.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
</package>
<package pkgid="81229028cc5ea2e56d3f4987568620deb48fbc636287bd58a682f82be23a2857" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="5a3bf0d87602f5266e1b0ec65295ca06b973d87617fdeac3c3e6e27f99bce2c9" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="33db7ffee229bf68c420fe25fb1a27caceeff97bee885048eac3a00e7cf167ad" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="0e07562da9eebe31d5bce591445734d9a6d8d79180b5e1313be455b16f6f6fe3" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="8.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
</package>
<package pkgid="2906bc8d3d9328b37c8e6c5c58a00bda904b7fc882d7d2f5e936c68fb6f58ec2" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="12.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
</package>
<package pkgid="13f72b3dd9530554bd03c2b4a8fe10925ab5daab117987435df4097ccfde8e9a" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="b18e9a59dce1b7d90e000f666d2ad549d3e21f72c0b4258a5dc02d5caf9e9819" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="dda95e81b1a2448486223cf40e103e3d75cd80a49a5e6766e2fa41cd9e5065c4" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="ed4f6bbbc5d1497b98f7514e6b195672542167a176a03dfc1dd73d6932c33760" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="8.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
</package>
<package pkgid="d16a5321fbc1f52570a7a554a24a0a95488dec70e4e1bc91faeab19274ed08a3" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="12.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
</package>
<package pkgid="e49cbf723cbbbe34a554d9257ab672354c473d108031ede3fc4fdb6a6298eff5" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="ac4d819e773975223d032b3f378eacecd6462879208ae3162382364423ce591f" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="cce1f816c5585ab8b87db7cbb7d8e9cf126c647a47f4006040c3ff7b7357ddbe" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="3e6a79aaec22f0b95cc0c18b8177fd357324adcf91e5f91dbf2783848d0df74e" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="8.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
</package>
<package pkgid="51738bb3ba1feb3e6c49697dd7685ca52cd0947e8c2aa8b676224b89b8780b0d" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="12.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
</package>
<package pkgid="5e9fc4c6b9913796f435b7e28f026a182b6958a88efcea2d745f834b92b8d8bc" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="1dab438f5e6105104ddb39b148b6c08e7581b58b2144c368213587db251d5ba7" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="4eebd08090402d8616cda796af1a7663789c08eeaef80cf4e99ea0adcc25bab4" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="77362efa326020161f01b06be28393d51622c6fe86e4ed06ae63793a96c84b4a" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="8.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
</package>
<package pkgid="25df28771cfb2f83845e1d6cdeacc582a089431ac6288a59bbc3eceec1dc3bb3" name="file" arch="aarch64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="55735b7111598f4fcd3c19c5de3f1fe4150faf0438e9bc7ca58e9b4151b4c498" name="file-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="b3d02b0553d60e61dc6d82c03e01e423c907b03cd70fb66be3546e9936a0896b" name="file-debugsource" arch="aarch64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="3557840518d658f3b4b23fc2608bde98abffd6748e07fe2e441c1b40923139b5" name="file-devel" arch="aarch64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="1a63dc8a2b464047e9cb39c8625afff4f777e21548194c642383aefb570fbc11" name="file-help" arch="aarch64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="c81afcc14200a99f46480a4592dc8387d6c8fb6d10aa44dd022f9abe5d7a1805" name="file-libs" arch="aarch64">
  <version epoch="0" ver="5.41" rel="3.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@huawei.com&gt; - 5.41-1" date="1637928000">- update to 5.41</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 5.41-2" date="1666180800">- fix typos fxlb</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.41-3" date="1692792000">- fix CVE-2022-48554</changelog>
</package>
<package pkgid="17bc09e05459b6ef56770bb296f09943bc7904938b5e3f5dcc4b1f09f4eb24b3" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.11.0" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-7" date="1625486400">- Fix build with pipewire 0.3</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-8" date="1625659200">- Fix firefox video tab crash with rust 1.51</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-9" date="1628683200">- Fix glibc dynstack</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
</package>
<package pkgid="14306dbc94dcf2b1b75623a8b413dd76dd469aea2f08d4b1aa8e011ce0621494" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.14.0" rel="1.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
</package>
<package pkgid="15e8899f17ee5b001772fa5b91d007a1b21e225a4dc2b141bb7a808f8f104842" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
</package>
<package pkgid="e111279debd1645a83b71ea4b63003d76b4e9fc37744ef16efca2341e9735560" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
</package>
<package pkgid="73cdaeb11bb4cca27941286be6f29ed1a19f43bd51c126ce0ad57f2d668feac0" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
</package>
<package pkgid="65afad09ad268591064d339e34adc8995ccc33ae2499f923f3846b45d84119fc" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
</package>
<package pkgid="90d6204f6da411e8e8daa5b145d6363365d364cdc6996ba30455ab0415a3962f" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="6.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
</package>
<package pkgid="e05d941118002de699146b4ca69ea4b55715afb33d3310ea280066fb05938dcb" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="845798245e00be3dd83f9b3694de73a930b741c519d9f0070363f3594b9c5fd2" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.11.0" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-7" date="1625486400">- Fix build with pipewire 0.3</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-8" date="1625659200">- Fix firefox video tab crash with rust 1.51</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-9" date="1628683200">- Fix glibc dynstack</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
</package>
<package pkgid="31078f54cf61e62719efe48cdc38425c5c3e0cd784c2ba6444395162e7f9fb50" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.14.0" rel="1.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
</package>
<package pkgid="c0b8a1825682ee0e5c95b9585626ca11943efeaac004db5b992d02605b30646b" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
</package>
<package pkgid="57a3061feb1ae7f1b18a887ceb7788349bd4da9c86d739e7d02fd35a096fa3c7" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
</package>
<package pkgid="87c0f705d9ee1c68e260a853a90089e40d76984894b710e9bfe41d06a7378cdf" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
</package>
<package pkgid="12dacc91815df70a409a59d4ab32b99c2686052233407bd6defefee4052dc6ba" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
</package>
<package pkgid="6ac5587b754cdabab106ca43242fd728adcbc4c0a71f1c21914cf9c9bc1b0944" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="6.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
</package>
<package pkgid="55659b31bfa1cebc355a71dc546c60924f4c20e113bb354efd659a4c53763119" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="99c93fc0d77689afc928746a12dc5787ebec2845133d43a5f8916f4d366139b5" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.11.0" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-7" date="1625486400">- Fix build with pipewire 0.3</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-8" date="1625659200">- Fix firefox video tab crash with rust 1.51</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; - 79.0-9" date="1628683200">- Fix glibc dynstack</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
</package>
<package pkgid="6dab525e664fa6dbb6d0b2d62302b11a3773d9ab9a5e75b38f088ec424a04d37" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.14.0" rel="1.oe2203sp1"/>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 79.0-10" date="1629720000">- Fix firefox tab crash with clone3 in glibc 2.34</changelog>
  <changelog author="baizhonggui &lt;baizhonggui@huawei.com&gt; - 79.0-11" date="1641902400">- Fix firefox wl_proxy_marshal_flags undefine.</changelog>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
</package>
<package pkgid="22c244723015bbd2ba35092fc5dc96c66150e1164f7a3b4eb47017289596c54d" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 79.0-12" date="1647518400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
</package>
<package pkgid="19fe87422ac3f39a6256c2699d445eda7f5e16c401a0c0242f9f9c3a186e609a" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="3.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 79.0-13" date="1666267200">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
</package>
<package pkgid="357620d3b9496f0ccf8229c66c7b4bf446378426e2b020e25d7d410a564a04e1" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="4.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.9.0-1" date="1683374400">- Update to 102.9.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
</package>
<package pkgid="7f3851fe7d2d24c7d29e84d52100617141f701a111537b0a4eb979848a899012" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="5.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-1" date="1684152000">- Update to 102.11.0</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
</package>
<package pkgid="8e063f9b3b11e55c044b21c2bb81e718f3b2d3d6cdc4ffc4d227b7b43bc7040c" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="6.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 102.11.0-2" date="1684238400">- Modify error source1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
</package>
<package pkgid="6c5d7396bf7704cfcfdc2a9f56cde3c0e583f414a635923310e1396973cde8ca" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="39092449f9e996662e8036dd41384295899edf202a6897a57bae5a271a558d52" name="firewalld" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="7622210ded9ac0f3c17794dbfd97a8333cfc01fa051b9a2a620feb1a89fd7147" name="firewalld-doc" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="89a8adcaf315b99deccbf42238eaa60282a16b01b9fef5f66a0ac82387f00da8" name="firewalld-test" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="8d4c76212cadab662f29af93c496aed63a8a24e177fa8280e5a2f154b250a70b" name="flac" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="4aaa8a100887df9fae377f0c93921bd520bb230cf9f23121972b947d45768c26" name="flac-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="345df8da0dc74558b4c70b649eedfcc6b75c2d3b7fdb1ba1f8799f130174a0b4" name="flac-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="4baa44237e0c6c1a5230977c9162c4986ed135bba3fd65dad2541815c26941b3" name="flac-devel" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="6f7aad39ddf0ca4ab16b2c13a8f95711784f9b1dc9bb4242ea8cea686d31ad18" name="flac-help" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 1.3.3-2" date="1648728000">- fix CVE-2021-0561</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-3" date="1650801600">- enable makecheck</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-4" date="1651060800">- disable check to avoid build error</changelog>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; - 1.3.3-5" date="1651060801">- rebuild package</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.3.3-6" date="1653739200">- fix CVE-2020-0499</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.3.3-7" date="1666180800">- add sw64 patch</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-1" date="1667995200">- update to 1.3.4</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 1.3.4-2" date="1693310400">- fix CVE-2020-22219</changelog>
</package>
<package pkgid="909d56182958aa1edd6d4f39e11243d1e94e2c128b9063e0e96880899923820a" name="flatpak" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="7a5e6e47cb0cd84fb0c4d08753c12d0df333fde15ae047a7a465af1f69db6edd" name="flatpak" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="17f0898514c79168cacfb02539ce8bde15bf5fbaba73316ae262192c7365a071" name="flatpak" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="50fc61b4a4360141aea6b35ea9ceb134becff3340fa70370967061ae2a26857c" name="flatpak-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="6b28b2644fe31fcfe41790cc9d017d4e0a6972a6f2b9f038fd5f483f53f5985a" name="flatpak-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="f5023062270fbf2f4633d10fc052aed156a36d6f2bf8392ddf79f63edd898544" name="flatpak-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="799d86881cf80f0e4a1b14d67224b9be6ce2f7068c394083f570246262126bfe" name="flatpak-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="43b0f9b598e18ec769507a68078a0ee72a9d38f883c04bb7f49b1b6479c5176e" name="flatpak-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="867a721e414f2231c42ab288c88aa4928133ce245e0b5ffcb94e6d2df0955155" name="flatpak-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="f0cc2730a9e60b746f75a56b7ef853314fcad464f119b8b4c64d5e6392380568" name="flatpak-devel" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="40851a7357a5bace707a122f9ce27d41dfd2b8460a03371199a1e700240840dd" name="flatpak-devel" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="fd5373e315db532617faf7fd9563c2ad25f6b40eedb5bcf86b2fd22083932b1b" name="flatpak-devel" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="f40fe5e66824f3b7ac2ff24b5a614c40ccf4013c8195e0cde2c2124197c587ee" name="flatpak-help" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="7.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
</package>
<package pkgid="c4ba1b4a9125eb3b2cd073d7773a19a4c3c4416b21868454faf5f52618734896" name="flatpak-help" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="8.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="e68f1049becd6f38ca2feaf828072b0fa69df351e7564b81917088745c169630" name="flatpak-help" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp1"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="21bd058daf060a0ccb5d001597f90c7fbdf91844c35f928b045989cc7d41fe29" name="fontforge" arch="aarch64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="2ba1495ce1546977d380015e4248d4afbe4099fd1f64d2a7fc2733de3de5b35b" name="fontforge-debuginfo" arch="aarch64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="2626fd48654420f445bc060a971c7e8b8f3f0c304ac31ee2c6dff7a3cf1163cf" name="fontforge-debugsource" arch="aarch64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="4b7f4663b03f94d690514701f636d088783b1a539030ea322f7b12dde43cbd3e" name="fontforge-devel" arch="aarch64">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="d70b89158537c769c18f50c05067ca580af0e2dcb72a4a37085591b7c6a1a638" name="fontforge-help" arch="noarch">
  <version epoch="0" ver="20200314" rel="8.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 20200314-7" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
</package>
<package pkgid="683ac633861576f49c16895d4d9fda0e18ebcfe6a55c15cb78cce4190ae9e041" name="fop" arch="noarch">
  <version epoch="0" ver="2.2" rel="7.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 2.2-6" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-7" date="1694174400">- Fix build failure caused by batik upgrade to 1.17</changelog>
</package>
<package pkgid="ff9c64cae10a42fa630299e5ce168d024969622f2cbef79ddaa74b077ff9af50" name="fop" arch="noarch">
  <version epoch="0" ver="2.2" rel="9.oe2203sp1"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 2.2-6" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-7" date="1694174400">- Fix build failure caused by batik upgrade to 1.17</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.2-8" date="1694865600">- Remove the mif parameter in the help message</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-9" date="1728561600">- Fix CVE-2024-28168</changelog>
</package>
<package pkgid="26bac52fec9611191695ac8dd6c92e9e1892483a0ed6c2ee2afadb804f6aed78" name="fpack" arch="aarch64">
  <version epoch="0" ver="3.490" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 3.490-1" date="1644408000">- Upgrade cfitsio to 3.490 to fix CVE-2018-3848,CVE-2018-3849</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -3.490-2" date="1661342400">- Remove rpath</changelog>
</package>
<package pkgid="e2bc3b9f134e050c024ca60ac36e41eea5f5198af0389ca436f67cd883cccd55" name="freeglut" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="94f94726934e1aee5c85fc5c635246edc0cd595a87bc432f662f37d0874f1870" name="freeglut-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="4968e83e95c43def83189c36585b650cff7ad79ae8d4087cade20cb14c2779be" name="freeglut-debugsource" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="18629e2e5e8c6fed6d4f6c90a1485019314597d0f26690317de0168d55b96a84" name="freeglut-devel" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="bcedad06267fc60bc9170cc7a19a96389bd7a916470b82702803f4d0edb84158" name="freeglut-help" arch="aarch64">
  <version epoch="0" ver="3.0.0" rel="12.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.0-12" date="1708257600">- Fix CVE-2024-24258 and CVE-2024-24259</changelog>
</package>
<package pkgid="7d93a96ffbabe547eed5d057378ca80664a53b85fd2b547453083e2fa99e6652" name="freeradius" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="57bb0946150acd60fd952fcdec885547e04d3788171f57ee9ea0eb7b4c2c0305" name="freeradius-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="787b69f15ac791052d4b41f8c8a33763060fa969d27604d278b0e53061347d0c" name="freeradius-debugsource" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="0c45ad4dad67025d43e4eaca24c136cf4de6cdf1a971cb38ece5720606e799f5" name="freeradius-devel" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="2be7ecb39b81902b93a1a65a38f76c16be487da85a94ea452666129612a3ad0e" name="freeradius-help" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="852d2791ac2868f83684855d0fe85601df6d70d1645d95ff748ba78b44bdb45e" name="freeradius-krb5" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="a9be4564aff58d0b7d7be2dc82fd59029b1f831fb947aab7d39999c92a1046e2" name="freeradius-ldap" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="e7b16673e0b186f3b943cf1f082051cd1f023cfc4ac290f67ee103a550ccc182" name="freeradius-mysql" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="b4885b712a43aef1be8a685b3a527185fb77bd592f7e96817bb2dce00132e12a" name="freeradius-perl" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="2c5008fd3bd6d7d58f98ce41929279a3eadd7bc6cd75d04acd9a0346a2175599" name="freeradius-postgresql" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="33b028c61f25c2531442de1db6469dac2f2156f0bd5a0534a134f16499796105" name="freeradius-sqlite" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="c1113865a83584303d638600fc39378d03d2345218a28b53f10e137bccd98094" name="freeradius-utils" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="496dbeb0181a1dae2a5ff68e17852807d7f58cf441e2aaa7d145e6bd8ad9957a" name="freerdp" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="d42fc6275f451de26941e23c5c92c4d4255aa2825d8c8b521c5c053a423a7d60" name="freerdp" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="977969a8eda6a0a9badc5849a4bc788549ebf6ee98658f295bfa6ecb45f7c768" name="freerdp" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="271457f70360ca14f825fd6604a690601bf08330afa0706fa23773484ba3c758" name="freerdp" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="f8b509ceedfbb6119689ebb015c6fb3ce7227291115b8dc03c44bd0b1eef783e" name="freerdp-debuginfo" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="0185404790963f08aba3519638f6501c4fb6c921be927b4e851e72864eedef0a" name="freerdp-debuginfo" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="02cd018eff3b9f5ab63d0fb5c1ce3772b9f48781cd6bd993d0e10de281fbec6c" name="freerdp-debuginfo" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="ba6b65a89d3d98ebcff25bfb42c2f77d3d49545944dea8db22fe8a255832820b" name="freerdp-debuginfo" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="ae750d430c9c1122689fcedeb7392ed20590acc15ed8299a128aa8bf95271bc2" name="freerdp-debugsource" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="904e947537b999f53726bc93dabceef1e86d094affa5d5c97582ec5946a0cbac" name="freerdp-debugsource" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="a0e6ef65fdff277bc4eae133adc855730ee7c3675d858360d688a66be29d3977" name="freerdp-debugsource" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="65ddba2f712f3aeffbfb7e5d276235872cecabdd67feaefc547e2ab4781f1d28" name="freerdp-debugsource" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="a6c7fe6322a41d5c63d89c744fccb27415a855a6dbf71a41b16847212a64eb2c" name="freerdp-devel" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="be8d75067692fa1531ac586763456311ef43f1b0dbe85babcd5418025e0f66a2" name="freerdp-devel" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="49792602c3637895f837c2625fe05ba4f69e17ddcae5acde98b96fd17ede7691" name="freerdp-devel" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="aa2fa103936b76d4294d8c0ea8965546191c94e48fcfb0ab104c69af377114f8" name="freerdp-devel" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="2dc0aa0db364e943d413b7e018e4091b5c1afdd1e1efa56ff31b7b815afdc09a" name="freerdp-help" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2:2.4.1-1" date="1635854400">- Upgrade freerdp to 2.4.1 for fix CVE-2021-41159, CVE-2021-41160</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; - 2:2.4.1-2" date="1636372800">- Add ldconfig config file to fix freerdp-proxy dynamic library dependency</changelog>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
</package>
<package pkgid="b50a3c70d787d33096121e464b0375e3c9c44d939e1daa27973f99bc4ab58844" name="freerdp-help" arch="aarch64">
  <version epoch="2" ver="2.11.1" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
</package>
<package pkgid="2ef492b546dcab4b1969170fcd83403d292b8e06f2961177729fe7dcc825fbaf" name="freerdp-help" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="1.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
</package>
<package pkgid="99e3fb3ffa00d14c40f461080f659b2c846bfa34287e0e5a4e2dabf07a5e124e" name="freerdp-help" arch="aarch64">
  <version epoch="2" ver="2.11.7" rel="2.oe2203sp1"/>
  <changelog author="houyingchao &lt;houyingchao@h-partners.com&gt; - 2:2.7.0-1" date="1651924800">- Upgrade to 2.7.0
- Fix CVE-2022-24882 CVE-2022-24883</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 2:2.8.1-1" date="1666267200">- Upgrade to 2.8.1
- Fix CVE-2022-39282</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-2" date="1669118400">- Fix CVE-2022-39316
- Fix CVE-2022-39318
- Fix CVE-2022-39319
- Fix CVE-2022-39347
- Fix CVE-2022-41877</changelog>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2:2.8.1-3" date="1669377600">- Fix CVE-2022-39320
- Fix CVE-2022-39317</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2:2.8.1-4" date="1670932800">- add requires systemd-pam</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:2.11.1-1" date="1694001600">- 2.11.1
- Fix CVE-2023-40567
- Fix CVE-2023-40569
- Fix CVE-2023-40188
- Fix CVE-2023-40186
- Fix CVE-2023-40181
- Fix CVE-2023-39353
- Fix CVE-2023-39352
- Fix CVE-2023-39356
- Fix CVE-2023-39350
- Fix CVE-2023-39351
- Fix CVE-2023-39354
- Fix CVE-2023-40589</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.1-2" date="1706097600">- Fix CVE-2024-22211</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
</package>
<package pkgid="d10038a732bd798311d40b7cb9999d988942292d1a6a6cb6966b24933504b014" name="freetype" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="945cc7ca556d10f330229364b93ac1775eddb48d0c22ca46c95da852ddca8f37" name="freetype-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="04030019ad83d3d34ec5e0740be6b689bddff1b1ee922a082071f15f061435e4" name="freetype-debugsource" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="8fc684f225d103d7f45c2cd0f9083183f83158a88b2c519847e24290372e3be5" name="freetype-demos" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="4bf5c8ae1233ead079ff7cfb4efbf375bfa8e0e1af3d1894fbabb3b5dd68da7e" name="freetype-devel" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="3f988039b381db4313cb29af82210ab43dfc3e287e0ffb829409ab9dcc17a7e0" name="freetype-help" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="2.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 2.11.0-1" date="1639137600">- update to 2.11.0</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paerners.com&gt; - 2.11.0-2" date="1652529600">- fix CVE-2022-27404,CVE-2022-27405,CVE-2022-27406</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-1" date="1669723200">- update to 2.12.1</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
</package>
<package pkgid="621a3f8cefc6955921d96990af2774b6a15b012caf9f96d62120b4a91ee0425b" name="galera" arch="aarch64">
  <version epoch="0" ver="26.4.16" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 26.4.16-1" date="1701777600">- Upgrade to 26.4.16 and fix build error</changelog>
</package>
<package pkgid="a473741813cd93d133f38377976d22b106826a1d842ffc86d05946ae77566af0" name="galera-debuginfo" arch="aarch64">
  <version epoch="0" ver="26.4.16" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 26.4.16-1" date="1701777600">- Upgrade to 26.4.16 and fix build error</changelog>
</package>
<package pkgid="6cf8d09223e343f86026e4e0e020f60e55c3b3795a63609a8ca272e2c447e112" name="galera-debugsource" arch="aarch64">
  <version epoch="0" ver="26.4.16" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 26.4.16-1" date="1701777600">- Upgrade to 26.4.16 and fix build error</changelog>
</package>
<package pkgid="b2f2221a3664c4ac86226efd09b41e6dab88feef318f38ea501cb8167dc2165c" name="gawk" arch="aarch64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="ef885a3ed09976ad4a9714498286a18f3a69bb87441747b63682e2160db800bd" name="gawk-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="f701af8160fee3f6e9663d9b062232f720f2fc07099cfe79ab20687358756f31" name="gawk-debugsource" arch="aarch64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="1c0708a246c5bfd7a484fec9277e0b6d3b35afd977e0b3ed929af74128a4e9ee" name="gawk-devel" arch="aarch64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="312825fdc089d2dbd1b44a5f4deb35b5225a72ffcc1c881d5731f164d335b4ec" name="gawk-help" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="c54904e8efc211010b72e960a818477835163c0926a38726a5b2f15c4a6e91cd" name="gawk-lang" arch="aarch64">
  <version epoch="0" ver="5.1.1" rel="5.oe2203sp1"/>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 5.1.1-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update gawk to  5.1.1-1</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-2" date="1648814400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix test case probabilistic fail</changelog>
  <changelog author="zoulin &lt;zoulin13@h-partners.com&gt; - 5.1.1-3" date="1662120000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix source code cannot be found</changelog>
  <changelog author="guoqinglan &lt;guoqinglan@kylinos.com.cn&gt; - 5.1.1-4" date="1682251200">- fix sw_64 build</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 5.1.1-5" date="1693224000">- fix CVE-2023-4156</changelog>
</package>
<package pkgid="c04d93c8696164a8234a1a276fad852acb09645386182121215dc6640663fad0" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="44.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-35" date="1671278400">- optimite net type
  app bind numa when epoll/poll create
  stack thread params set dafult value</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-36" date="1671278401">- remove mbuf reserve in mbuf alloc</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-37" date="1671364800">- pkts-bulk-send-to-nic and rpc-dont-send</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-38" date="1671537600">- optimite recv data buff and send pkts index</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-39" date="1671624000">- add mempool dfx info
  write support without epoll/poll</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-40" date="1671710400">- add dfx rcv_nxt info
  mbuf private cache line align
  send pkts index bug fix
  free recv pkts in main loop</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-41" date="1671796800">- fix null pointer deref in stack_broadcast_close
- fix lstack Makefile warning</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-42" date="1672228800">- pbuf cacheline align
  support main thread affinity
  reduce epoll wakeup</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-43" date="1672401600">- revert expand recv data buff</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-44" date="1673006400">- add the suggestion of using the -u parameter when the connection to unix socket fails</changelog>
</package>
<package pkgid="528c3f068e282f4619e50875302be8131969f35618107392e5ea687e45d88e52" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="57.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.0.1-55" date="1681992000">- sepeate_string_to array add error args handle</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-56" date="1683979200">- fix build err with dpdk-21.11
- fix config flow rule race
- update lstack.Makefile
- add socket check before write it
- optimize do_close
- set kni_switch valid only in primary process
- fix build err on select_path
- optimite select_path and pbuf_take
- check primary process idx and secondary lstack num
- revert select_thread_path and optimize app thread when sendmsg
- do not transfer broadcast arp pkts to other process</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-57" date="1684238400">- add udp multicast support in gazelle
- clean code
- add bond4 suport
- dfx: security function failed, return error directly
- dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
- fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
- add parentheses to fix build error
- fix rpc msg alloc failed fix process_numa args error coredump fix sock-&gt;conn not free when fd is kernel mode
- kni down not stop nic
- fix client connect number unbalance on lstack
- fix gazellectl -x error when multiplt user nic config</changelog>
</package>
<package pkgid="72c190269c750084dc06f8abdf673aec7c32261b425fdbe5947532eea542dea3" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="70.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
</package>
<package pkgid="fb5006b3c5a0b2953374648b4c1e12d183e8f8a268c9f5b40621910778160bf2" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="2.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-71" date="1688212800">- fix bond4 EPOLLOUT event error</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-72" date="1688385600">- bond4 add dpdk return value check</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.2-1" date="1688472000">- update version to 1.0.2</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.2-2" date="1688817600">- sync remove unused dpdk dynamic libraries</changelog>
</package>
<package pkgid="f53405d9777ba3a6c54bc5c27453a510289c08ac3ffdccc08a32af7121a54fd9" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="23.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-14" date="1700308800">- enable ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-15" date="1700308801">- wrap: dont hijack select temporarily</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-16" date="1700654400">- ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-17" date="1701259200">- support vlan offload
- add vlan_id in netif
- dfx: add tcp exception and kernel event statistics
- stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
- add tcp faste timer cnt
- dfx: support bond get dpdk xstats
- update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
- ltran support vlan
- cfg: rm ipv6_enable
- wrap: fix connect wrong port after addr bind two ports
- add gazelle log
- PRE_LOG: modify log info while there are repeated items in conf file
- add gazelle log</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-18" date="1702123200">- Fixed an issue where no packet is sent or received when UDP traffic is sent
- support show nic offload and features
- log: optimize lstack log
- gazellectl add connect para
- dfx: fix 'gazellectl lstack show ip' failed
- The call stack is not printed in the proactive exit scenario.
- dfx: gazellectl -c support ipv6
- 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
- wrap: support shutdown
- add struct gz_addr_t
- fix coredump because of addr null in lwip_fill_sendring
- fix compilation error
- fix coredump because sock closed before send data fully
- gazellectl: fix gazellectl lstack show 1 -r error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-19" date="1702728000">- fix EPOLLIN event error
- optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
- mod unix time stamp to local time
- fix close can't exit
- add keep-alive info
- dfx: fix kernel_events stat</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-20" date="1702900800">- fix gazellectl lstack show ip -r with ltran error &amp;&amp; log info display unknow error
- mod time err</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-21" date="1702987200">- support netperf
- fix udp multicast bind error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-22" date="1703678400">- fix rte_ring_create/free time consuming
- use default nonblock mode
- fix func separate_str_to_array overflow problem
- CFG:fix check func strdup return value is NULL
- fix gazellectl -c msg error
- sigaction: fix deprecated signal flags
- fix alloc not free
- optimize shutdown exit process</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-23" date="1706356800">- fix dpdk_alloc_pktmbuf time-consuming
- ltran: optimize config file error message</changelog>
</package>
<package pkgid="ff715e7c2b15f4f293ced3fd78c2ae472f5b9b03d901bfb35afc4e504d5794e3" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="46.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
</package>
<package pkgid="b2f62b01ebef78d67c0efddf2681dbe04d67b798bbd5f4c9fdaeb9735ab6339a" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="863c72465f5b0ccf34e6645168e5037973390dea95041d739fcc0bd7e8f9335c" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="1703b7574acd6b9fd04814006e7989a62932a8a54bf4cb39c4b94b1d64072120" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="69.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-60" date="1725624000">- fix: when errno is ENOTCONN, ignore it
- tools: fix script generate patchname wrong</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
</package>
<package pkgid="7c19ecbcca157d6489750ea3e82307b6623e58f9155dab15f9c57a608dc41aaf" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="70.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
</package>
<package pkgid="f5bf61723443874dd2e1fe863d5aa02ce18ead62f5cbf79652d27c698b980fda" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="71.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
</package>
<package pkgid="2acc8116d148f84e6e0da9f5fe2a5168996c67a093e108dbd481c0c93116f752" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="73.oe2203sp1"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438400">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438401">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
</package>
<package pkgid="a851b937b0b685070ab8dd197c004ac4122bef3492029331afb93f7cba93c5ee" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="44.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-35" date="1671278400">- optimite net type
  app bind numa when epoll/poll create
  stack thread params set dafult value</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-36" date="1671278401">- remove mbuf reserve in mbuf alloc</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-37" date="1671364800">- pkts-bulk-send-to-nic and rpc-dont-send</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-38" date="1671537600">- optimite recv data buff and send pkts index</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-39" date="1671624000">- add mempool dfx info
  write support without epoll/poll</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-40" date="1671710400">- add dfx rcv_nxt info
  mbuf private cache line align
  send pkts index bug fix
  free recv pkts in main loop</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-41" date="1671796800">- fix null pointer deref in stack_broadcast_close
- fix lstack Makefile warning</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-42" date="1672228800">- pbuf cacheline align
  support main thread affinity
  reduce epoll wakeup</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-43" date="1672401600">- revert expand recv data buff</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-44" date="1673006400">- add the suggestion of using the -u parameter when the connection to unix socket fails</changelog>
</package>
<package pkgid="e280f1864d265395c6f0f95e83750125bb7075e3401726c21daae9e5bbf56a07" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="57.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.0.1-55" date="1681992000">- sepeate_string_to array add error args handle</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-56" date="1683979200">- fix build err with dpdk-21.11
- fix config flow rule race
- update lstack.Makefile
- add socket check before write it
- optimize do_close
- set kni_switch valid only in primary process
- fix build err on select_path
- optimite select_path and pbuf_take
- check primary process idx and secondary lstack num
- revert select_thread_path and optimize app thread when sendmsg
- do not transfer broadcast arp pkts to other process</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-57" date="1684238400">- add udp multicast support in gazelle
- clean code
- add bond4 suport
- dfx: security function failed, return error directly
- dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
- fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
- add parentheses to fix build error
- fix rpc msg alloc failed fix process_numa args error coredump fix sock-&gt;conn not free when fd is kernel mode
- kni down not stop nic
- fix client connect number unbalance on lstack
- fix gazellectl -x error when multiplt user nic config</changelog>
</package>
<package pkgid="f2fc403d55cc294642b873720f3e033a6520ac5fed16f2f0ebef53d04ee3364f" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="70.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
</package>
<package pkgid="a6267c8758d9d136c65d468f30e66fcb808f514b36c783e5dfada9c0cc154359" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="2.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-71" date="1688212800">- fix bond4 EPOLLOUT event error</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-72" date="1688385600">- bond4 add dpdk return value check</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.2-1" date="1688472000">- update version to 1.0.2</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.2-2" date="1688817600">- sync remove unused dpdk dynamic libraries</changelog>
</package>
<package pkgid="21288e32df64bfaeacb0b617aed8782ed7551e3f311b391fe0bba39067b252fa" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="23.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-14" date="1700308800">- enable ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-15" date="1700308801">- wrap: dont hijack select temporarily</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-16" date="1700654400">- ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-17" date="1701259200">- support vlan offload
- add vlan_id in netif
- dfx: add tcp exception and kernel event statistics
- stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
- add tcp faste timer cnt
- dfx: support bond get dpdk xstats
- update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
- ltran support vlan
- cfg: rm ipv6_enable
- wrap: fix connect wrong port after addr bind two ports
- add gazelle log
- PRE_LOG: modify log info while there are repeated items in conf file
- add gazelle log</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-18" date="1702123200">- Fixed an issue where no packet is sent or received when UDP traffic is sent
- support show nic offload and features
- log: optimize lstack log
- gazellectl add connect para
- dfx: fix 'gazellectl lstack show ip' failed
- The call stack is not printed in the proactive exit scenario.
- dfx: gazellectl -c support ipv6
- 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
- wrap: support shutdown
- add struct gz_addr_t
- fix coredump because of addr null in lwip_fill_sendring
- fix compilation error
- fix coredump because sock closed before send data fully
- gazellectl: fix gazellectl lstack show 1 -r error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-19" date="1702728000">- fix EPOLLIN event error
- optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
- mod unix time stamp to local time
- fix close can't exit
- add keep-alive info
- dfx: fix kernel_events stat</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-20" date="1702900800">- fix gazellectl lstack show ip -r with ltran error &amp;&amp; log info display unknow error
- mod time err</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-21" date="1702987200">- support netperf
- fix udp multicast bind error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-22" date="1703678400">- fix rte_ring_create/free time consuming
- use default nonblock mode
- fix func separate_str_to_array overflow problem
- CFG:fix check func strdup return value is NULL
- fix gazellectl -c msg error
- sigaction: fix deprecated signal flags
- fix alloc not free
- optimize shutdown exit process</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-23" date="1706356800">- fix dpdk_alloc_pktmbuf time-consuming
- ltran: optimize config file error message</changelog>
</package>
<package pkgid="8a3cfffec3b9d6a94cc8f071889322234b2e00d77befadf6678b155622667037" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="46.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
</package>
<package pkgid="ce322e6be917fd7b7bb6c1de4cf51dc2138036286ce28950f4c5d072bde252e9" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="66a9d35cbcf3e176bec7ad7763303adb316a5ce1a819afd8ff7977787aa43cf5" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="38fd2a5aa3c89bdabfef24099377845f58afcaedc8b1a667d0f701b8ddc75e53" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="69.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-60" date="1725624000">- fix: when errno is ENOTCONN, ignore it
- tools: fix script generate patchname wrong</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
</package>
<package pkgid="c76f7ff6ae5f8c628e7a50ce7c8805d268ce1ced4e54f0793dc67096737f43f6" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="70.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
</package>
<package pkgid="9929e5b83464fc33464237e48d95c2f8eab81d4881b80812bc2f0b79545ea652" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="71.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
</package>
<package pkgid="4162624a57ca262c1d369e9e4120e03fca27205a630ecf857be853f6c7d67b3c" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="73.oe2203sp1"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438400">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438401">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
</package>
<package pkgid="35289b2916485760e9d6ea2500c8d9928e9bace9cd93ed6572aa89905da6ea15" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="44.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-35" date="1671278400">- optimite net type
  app bind numa when epoll/poll create
  stack thread params set dafult value</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.1-36" date="1671278401">- remove mbuf reserve in mbuf alloc</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-37" date="1671364800">- pkts-bulk-send-to-nic and rpc-dont-send</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-38" date="1671537600">- optimite recv data buff and send pkts index</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-39" date="1671624000">- add mempool dfx info
  write support without epoll/poll</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-40" date="1671710400">- add dfx rcv_nxt info
  mbuf private cache line align
  send pkts index bug fix
  free recv pkts in main loop</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-41" date="1671796800">- fix null pointer deref in stack_broadcast_close
- fix lstack Makefile warning</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-42" date="1672228800">- pbuf cacheline align
  support main thread affinity
  reduce epoll wakeup</changelog>
  <changelog author="wuchangsheng &lt;wuchangsheng2@huawei.com&gt; - 1.0.1-43" date="1672401600">- revert expand recv data buff</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-44" date="1673006400">- add the suggestion of using the -u parameter when the connection to unix socket fails</changelog>
</package>
<package pkgid="1aa01f6d4807df63fe11c8ae5e547abb29f37089c8933c742b56af1b1c16d76e" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="57.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.0.1-55" date="1681992000">- sepeate_string_to array add error args handle</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-56" date="1683979200">- fix build err with dpdk-21.11
- fix config flow rule race
- update lstack.Makefile
- add socket check before write it
- optimize do_close
- set kni_switch valid only in primary process
- fix build err on select_path
- optimite select_path and pbuf_take
- check primary process idx and secondary lstack num
- revert select_thread_path and optimize app thread when sendmsg
- do not transfer broadcast arp pkts to other process</changelog>
  <changelog author="kircher &lt;majun65@huawei.com&gt; - 1.0.1-57" date="1684238400">- add udp multicast support in gazelle
- clean code
- add bond4 suport
- dfx: security function failed, return error directly
- dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
- fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
- add parentheses to fix build error
- fix rpc msg alloc failed fix process_numa args error coredump fix sock-&gt;conn not free when fd is kernel mode
- kni down not stop nic
- fix client connect number unbalance on lstack
- fix gazellectl -x error when multiplt user nic config</changelog>
</package>
<package pkgid="0a028f65bfd7661c9546622500c8ec748e6f35d2bd656195fb6afcd7238fd45c" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="70.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
</package>
<package pkgid="ce0d37d4e2a6e21bf034e63782e75543243265d6645ee774d0ad1a7ecd8212f6" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="2.oe2203sp1"/>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-68" date="1687348800">- check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
- fix core dump when slave mac failed</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-69" date="1687867200">- add udp_enable to turn off udp in need</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.1-70" date="1688126400">- add build requires constraints on lwip version</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-71" date="1688212800">- fix bond4 EPOLLOUT event error</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.1-72" date="1688385600">- bond4 add dpdk return value check</changelog>
  <changelog author="jiangheng12 &lt;chengyechun1@huawei.com&gt; - 1.0.2-1" date="1688472000">- update version to 1.0.2</changelog>
  <changelog author="jiangheng12 &lt;jiangheng14@huawei.com&gt; - 1.0.2-2" date="1688817600">- sync remove unused dpdk dynamic libraries</changelog>
</package>
<package pkgid="410989f0de623969243ca4b330442cf14ee9a2fa3b9e5bada3ab3f8758fe7a84" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="23.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-14" date="1700308800">- enable ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-15" date="1700308801">- wrap: dont hijack select temporarily</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-16" date="1700654400">- ipv6</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-17" date="1701259200">- support vlan offload
- add vlan_id in netif
- dfx: add tcp exception and kernel event statistics
- stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
- add tcp faste timer cnt
- dfx: support bond get dpdk xstats
- update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
- ltran support vlan
- cfg: rm ipv6_enable
- wrap: fix connect wrong port after addr bind two ports
- add gazelle log
- PRE_LOG: modify log info while there are repeated items in conf file
- add gazelle log</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-18" date="1702123200">- Fixed an issue where no packet is sent or received when UDP traffic is sent
- support show nic offload and features
- log: optimize lstack log
- gazellectl add connect para
- dfx: fix 'gazellectl lstack show ip' failed
- The call stack is not printed in the proactive exit scenario.
- dfx: gazellectl -c support ipv6
- 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
- wrap: support shutdown
- add struct gz_addr_t
- fix coredump because of addr null in lwip_fill_sendring
- fix compilation error
- fix coredump because sock closed before send data fully
- gazellectl: fix gazellectl lstack show 1 -r error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-19" date="1702728000">- fix EPOLLIN event error
- optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
- mod unix time stamp to local time
- fix close can't exit
- add keep-alive info
- dfx: fix kernel_events stat</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-20" date="1702900800">- fix gazellectl lstack show ip -r with ltran error &amp;&amp; log info display unknow error
- mod time err</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-21" date="1702987200">- support netperf
- fix udp multicast bind error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-22" date="1703678400">- fix rte_ring_create/free time consuming
- use default nonblock mode
- fix func separate_str_to_array overflow problem
- CFG:fix check func strdup return value is NULL
- fix gazellectl -c msg error
- sigaction: fix deprecated signal flags
- fix alloc not free
- optimize shutdown exit process</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-23" date="1706356800">- fix dpdk_alloc_pktmbuf time-consuming
- ltran: optimize config file error message</changelog>
</package>
<package pkgid="564bbd49b230d590069f0baaf206840762c80620d764d0f3ed8d82420a696205" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="46.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
</package>
<package pkgid="ef9f610be9e71bf357de65093f074a0ca2c5f20bd1be4287f88c2e64ec886d30" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp1"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="2b47f2defa8c2d9b553b18b9d63f2e101dcc20f0529a668318641e9f6364aa26" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="bff55260d637abcbf683b728c898179caf5880fc0378f62bacb879bc92f7934f" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="69.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-60" date="1725624000">- fix: when errno is ENOTCONN, ignore it
- tools: fix script generate patchname wrong</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
</package>
<package pkgid="28589fda6822c8338f78d5a3d9e8fa184197129bf5a0a3abf56f83a845fb1689" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="70.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
</package>
<package pkgid="d99e32c3a0ba5f2d11f7b9bbe8e2046b642174d7338ef7d002f1080622d16ae7" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="71.oe2203sp1"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
</package>
<package pkgid="22e65c92d6b4c833b54b0e19df1c43baf78a1007e665cf4233bb42e853088a8a" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="73.oe2203sp1"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438400">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438401">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
</package>
<package pkgid="dae8f04255d111d292fd6ec7222e3fb391a0b7b9a9bd4d5ec44bbee7ff5f0f1c" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="81c4618a4938b2393e678f7cdac6a53fb9195aab29621d52b9b8cc55e2d70d88" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="44fcf6f15f6fcbbfadeac887987aeffecd99764a57323db835cf732f5783645b" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="b3839acd951b4357a5a0dd2fcf70fecc01fef4e2c0996d12926559f358a74eae" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="98397a82afb375c27e0f0fdb9b416994b0c746c4bb404c9d2cee65455fabaf6b" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="6b3bdf59a31d4b81ad990cbf00004556e20aa9426fab238715acdf48ae537d9d" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="ee5d1e12d33e09881df042db3b02e12ffeb62cf41bfd426395746dda5b8cb650" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="f62b23d397919ced99d1946afa85c67defed7c28347a6f512b251939e0b5fc20" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="592b28312d361340179a377447ffcd67651fc4c7ba81b525f0e490206c9ac9aa" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="c8ff77a522da315a069840c9e33bb82edb3ec4602facb58b73563e97986ef771" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="030023b455d621d2b0aa10f71f1961b64a5295c77ee421ff9e69feb25300d7f2" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="a99efa60acb7b3f76a0606d9c32cce0a68096dea3d195aa12e68ff1faeb78049" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="645f968dda2096ffa6c17c412c14a16718a959a9162deab50a4db165617da183" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="02ab31b7e3f84d2438c09aac0f7fb53ea7e9932bda47a5a534a73f70ccf5c844" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="184a83a94fb6dc68ffd1be7f03e6d4bdcff6f62bbe9f6ea7c0ba3d21cec91265" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="71a09a91d0f9de80c6de20496fe0d943ebff32e9fd9ec1cf5196c9d61857bd6a" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="4cd2fb3659452ab653b0592db5c4d18b8ea9bd793f0f3d18bd95aabfb7a5f200" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="391aa4f1e0535995184d9b9c8d44ff63e4010224f264e1664d97fbbb34c61560" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="e243898aea8e972468cd127080a88cee619e4aeb14af30757ff077ad49827bf1" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="8df8543e23d4dee2becca1ad98bd82ef5aa6cb2d0e2814688e776aadd5327190" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="fa5a0da3430543780313aa6efa02da11d93f0728e097deaf97145f2ae2bdb430" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="b51445066519ee79df9d5e597c0cc65e4e5f37829ce39fdc06e05361fd913c7b" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="f61127cd3dae45a5cf8650d78eba7b8efb2d56367c305844fdd4bb84ad2a03ed" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="0571842bf637e672258dddaaceba9e385d17cc6fcb80d02df603991e3e5b81fa" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="95feb3babf6e63a458fe6c6ec1168709d86257c4a0e73d5ce77606d775f1a75d" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="9e755325eb862bed197391a78351972e6f7fc66ee4a373c96e64c9c0f6979061" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="a8b74c1f9f289d6d13a8061d17c3126bb2c91a931859abd2ac700a45e2eba8eb" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="78de78ad704d4205c3844e257a720eaab2a5a7a4842eaef3ceb0f8b055782f37" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="54f190ab8d205aa8f8c958f86ce9cbb94835d2561f4b4c5c9e86204a80a08225" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="c524e36a3f471527e3744b4fbd579d2cb9840c2a5d2a0fdd1270c4e106da721e" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="60aa2db5bd0b9ad7e0852f87089796da02f3130fe36edb6c04a4c82554ee2b55" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="81c38bdc9f9cebaad60e2d5e7f7946a10cef94d4f8163f9a99d762fd2dfb2dec" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="0e629f8a243b2f2f1651812d6b08f55e6160b1a9130d1baee9357cdfacc2c6fa" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="62d8c20d6a33731d9aee04ebb5351799a4cb39d29515fb443224372eeef30de9" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="d71ed7a0322cd0b40245958d3ba4fe8435ae5445017a038a53190132d910f59b" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="c217b45ba149b2c6c43d85b637e9a59d40885c260c8d2debdd6333a7289faf04" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="1a4b88e7e7e0c61afd5a16371463d40242391c51195ae669bca68974d02440cd" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="8c377c0e333d5116b4b9189d09f23a8fbbc19cf34f0d770a6a016292fae4b178" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="adc9e669b06e364325615b781b71942a79da6c2984d32c52bb197b7e55755435" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="1609354a13bcb8c972b5db44fae4ddc9581c50d5bb0d4af8c66f79e1423ccf16" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="1f1403008afb283b2474f5007e982cfacdd101a0896d26f89a04b348bd33c40b" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="d02f6e2c231898f2cf5ed2165f551c7ce072f240afaa44e4a98635d6a7bc98f8" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="17f4420ebecfc2b16305c573872b0ba1387fa2543d0f6a48f804e4a00dec6090" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="8be8f6a81d07c355616a6f5dda33cef655b684d5d1626ac3a2d44592e4ab1a18" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="ef13325dc2bfa1dcbe037be5a8cb469bd689295e9506e05d65c63db38a86b860" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="cc284058b37af5301d82b21cd544fba69eeba52ed1ec674553e6fee2cc38b737" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="7aa0615bb66dcbf1a71e0ee3f2d04db08ab3f184c769f7eca91a165b23ef09e2" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="945bd413ce7debb007cf3c3fb7292005b458318f966a1d0826b6d02e017cfec6" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="eb27a2954fb0cb38d7d97202b565a32d84d53146d3231641c9645e66ea00413d" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="44e73781dacef5659518c82c2be289dcaf0b80bf9b37ca50e895a9660da35a44" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="4371e281418332931389772efaf7afe3016922a19bece210968c8f5fae440f55" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="3e860ade6eab17ae16f541bd543e94baa2637fe5fda4fc5ab113fe6ba7b720a7" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="e77c6bc482b201709bf84cf673cece38f6d383fdee47826c7cb8b27af3c53ece" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="f12fd2ba8a74916039f03a8c751b4d7fd5c45b62c82ed6df18aa26118e92289c" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="4beb8110b28d570a30672cc7c4ad90f67665be37d4bf94625c99755922277bed" name="gdb" arch="aarch64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="2bf1d4b71aa27957a9d57c2c59aedc0c023dfb7bbbf7152624669da6efb185f1" name="gdb" arch="aarch64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="a91c77dd80e1ab139d1ed4e2a95daa3482c27d6b73fca386ca91af6408ec10ef" name="gdb" arch="aarch64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="4543ce9deb5549c8bc7e387c9bf78c458f4dd59559d0c6fe155c229ebc0c3e80" name="gdb-debuginfo" arch="aarch64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="65797d18227e605663fc86d57fc8a259d76996c3d2bb2b12001e53856f61f900" name="gdb-debuginfo" arch="aarch64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="17546d2f9f30e4cbfbda59200a1cd118f7ad29e0df78efa7ea2e349a51f86508" name="gdb-debuginfo" arch="aarch64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="37794e56cc959d84778216ea0b314a804a7f67c73be5837b0efed5cb0b70aa9c" name="gdb-debugsource" arch="aarch64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="72f47f50bf8bb6e60f30545c7e5ded8dc99021172c14232dc9534730e4f573aa" name="gdb-debugsource" arch="aarch64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="f1512655c489c66e7df754afa9d73cd1418740c35285cdc135f92a8b5252f6ac" name="gdb-debugsource" arch="aarch64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="693dc0fbef44e129fb63a9e7aaf8ed8d642203b6c11f7819f3bcbf7edd46d798" name="gdb-gdbserver" arch="aarch64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="4d2e0a2ef3107813a61665bcb835abfe399e0fdf693fec17cbb9dab46940a629" name="gdb-gdbserver" arch="aarch64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="007ff0b8af9ca23c03156e90f0aa9e19d4a124b8f4d08f80246ee89928d7ea7b" name="gdb-gdbserver" arch="aarch64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="75824ba9ca0ede3708a3ad800d9cd932722ef011eb9905db2e7c104a0eda69f2" name="gdb-headless" arch="aarch64">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="20151d5dc348d626a04e5e8d7b3f2382e27c700e8f7897cb66c0fbb10bab649d" name="gdb-headless" arch="aarch64">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="c6b8bf31fb5aad1044f405615f54e76bbf096ed8b7ce9bde814280ac53d08959" name="gdb-headless" arch="aarch64">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="e17ad0367ad4c5fe98d00d2879b234f16453ac4a06345771e3f8abbe179f0b64" name="gdb-help" arch="noarch">
  <version epoch="0" ver="11.1" rel="6.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
</package>
<package pkgid="b6db1d7e113f07f279de515224f7e38605b5fe73e6c72f2bc1cdfc2bee247bef" name="gdb-help" arch="noarch">
  <version epoch="0" ver="11.1" rel="7.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
</package>
<package pkgid="6585283c654b5bfa544ad05a55406488df36c005f6c1fee03ca5429f81029377" name="gdb-help" arch="noarch">
  <version epoch="0" ver="11.1" rel="8.oe2203sp1"/>
  <changelog author="- Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 9.2-8" date="1640088000">- fix gdb build error via cherry-pick upstream patch</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@huawei.com&gt; - 11.1-1" date="1640606400">- upgrade GDB version to 11.1</changelog>
  <changelog author="yaowenbin &lt;yaowenbin1@huawei.com&gt; - 11.1-2" date="1666699200">- upgrade GDB release to 2</changelog>
  <changelog author="Wenyu Liu &lt;liuwenyu7@huawei.com&gt; - 11.1-3" date="1669204800">- Eliminate hard coding issues for vendor name in gdb/version.in</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 11.1-4" date="1682251200">- Sync 2203 loongarch64 support patch file</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
</package>
<package pkgid="6b4d40e8c825bf5afa082612b8a614954e4b220fcc1d8c99a6437f38a3a77bed" name="gdbm" arch="aarch64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="433f9c4630559ebc81e8a508de1393d3360a63fbc00614a8a9e34ce66779caca" name="gdbm-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="601722f0320a65cebacfbf5d79a2d37a9f696c821f2b71811c359477ee6a8319" name="gdbm-debugsource" arch="aarch64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="d03124f0cb95c1f0dc2f2215e0a41904f0688a6e8d36d7be44b21fda1920cbfb" name="gdbm-devel" arch="aarch64">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="76722e35370d706d20e1e7a2476aec4d16daff38be9a4d03d13d94890dad9350" name="gdbm-help" arch="noarch">
  <version epoch="1" ver="1.22" rel="11.oe2203sp1"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1.22-2" date="1639051200">- Fix gdbmtool parm import error</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22-3" date="1646136000">- add info into the devel package to resolve the installation error</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-4" date="1655467200">- DESC: Fix binary dump format for key and or data of zero size</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-5" date="1655899200">- DESC: gdbm_dump-fix-command-line-error-detection</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-6" date="1655985600">- DESC: fix location tracking in gdbmtool, fix the recover command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-7" date="1656417600">- DESC: Fix coredump in gdbmtool history command</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-8" date="1656936000">- DESC: Fix semantics of gdbm_load -r</changelog>
  <changelog author="wangzhqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-9" date="1657022400">- DESC: Improve handling of -u in gdbm_load</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 1:1.22-10" date="1661860800">- DESC: Fix allocated memory not released</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1:1.22-11" date="1679054400">- DESC: Minor fix in the compatibility library</changelog>
</package>
<package pkgid="328f562e882d8ce69d00bdeb32e81345c52d637a796561fd0c12a3afb42a7da6" name="gdk-pixbuf2" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="3638ee68745f6b2e1ccae082fcd462ea1555cf3c12bcfd675682d4b8daeca15e" name="gdk-pixbuf2" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="9d1acdc66494ab2c6248af3bd7c4a8015cdd7c7b829505e363e1c98b14b7c6d5" name="gdk-pixbuf2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="32e9ef7882ea005fdaad3ca674297a2e4b57057bbc278a9d2ef0ddc051311984" name="gdk-pixbuf2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="29a79e8cb8538a9d0ef035f9a9701d1c25757e9bec6effcda15bcc08e23ed2d1" name="gdk-pixbuf2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="67094190ff52450dbc47d60685843f3392bcdebeab75d02c0dd865904d3ec9a7" name="gdk-pixbuf2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="282fca1d0191895c2025fb176772c3976341b08a31f429d04df3fa74d2fb04b4" name="gdk-pixbuf2-devel" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="1ff30bdca07d1469ad205e72c1a9706e4bc0e11a5b195f1c7471dfc9eb134793" name="gdk-pixbuf2-devel" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="fd110dd5a691f3bdc3977f572ada58a1e2f3f1cdd89368da5a67e296a9235343" name="gdk-pixbuf2-help" arch="noarch">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="60e99565c557700e93788c54d1b677519ccdb301e9dc0a2bfeb9afb87c95c68b" name="gdk-pixbuf2-help" arch="noarch">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="6132a7be80e3e42f37dd6b89dce134545ae553a47e76eddf294c97af6d764b15" name="gdk-pixbuf2-modules" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="458709c909cca82862ee7857d0f9f64d8c576eca3ed52b955eb23ebfcfdb4e4e" name="gdk-pixbuf2-modules" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="2251383f8e68e74c6a2b60887da33f2305592989ca59b120b96e21130a415878" name="gdk-pixbuf2-tests" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="6.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.40.0-2" date="1626782400">- delete gdb in buildrequires</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 2.42.6-1" date="1638446400">- update to 2.42.6</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@h-partners.com&gt; - 2.42.6-2" date="1648641600">- enable tests</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.42.6-3" date="1652875200">- fix spec changelog date</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
</package>
<package pkgid="25030f92539fa5cfcf3f052036d1c29a002d973dd21a1f5754502121b6622c55" name="gdk-pixbuf2-tests" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="abfe688cb5faf063667f5b82284fe1f125f5d366c7fdeee650c607768716a567" name="genisoimage" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="9995882c8c8770c12da6aa6a94de3cddd2528e81ccfa51b1b8467c0793cbbc7a" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="df341e73dcb20e87753b69a055f98edd6275801464ae9a1343e24c0b179da587" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="12.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
</package>
<package pkgid="fb3acc071ab525d96bc43c327f50134387bf73d84bf45b4feecfdc6c75849e9d" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="15.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="93ce38d81440dd2ea9c82d897dd85f3ed4ae0ba8a4009b30931190dfbf0562dc" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="16.oe2203sp1"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1731067200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
</package>
<package pkgid="06a2c1a1ad1243456b8893e1c40767bef38b84d7d38c332e3b2cc13cd7e9b855" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="81280f9fc7ee023bedfc6b107535971a5cdedb472deada4b94dc4da5ea07462e" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="6c0798a34df7163ad02bde3a48998779ad5a0bf470b8527b4012cce9ba8cdd59" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="b8ca4e74380a22ffbbde50ac6cd6f799960598fd35fd90ae92b7dc18fc0ea98f" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="12.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
</package>
<package pkgid="8ff961ee76ff8aeeb9599da5fe2004896108297a9bac89e4f3636cc8f328544e" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="15.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="58434e2eb16ec9f4c061015146fd0895a287fa9ae373525a79c47b3c47c0c1ee" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="16.oe2203sp1"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1731067200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
</package>
<package pkgid="afed7017612c407ea35564181ed09b6d0317b8196b4f496ae45c30c6308c1735" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="d6bf5f2c457ce042c8f506ae98c3b3b6ae4d9aea8df6b4a42b4d7ca30319ce48" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="a85074607db0d9fb2fe6d342d3c2890ba14239f50a47393a9dc642fe06817a42" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="c8507fecc209f35864eaacc72229d776aec5e5d9fb86ad2a210c32fa75b76869" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="12.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
</package>
<package pkgid="c7c662e90a1c5842f6565b686dc07e7baa7c02e516f29730851bb9a6882334f1" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="15.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="44bca9bc4776effb541ac5ee5b70a7d910ec53711879105bfcfc2391eba6a81d" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="16.oe2203sp1"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1731067200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
</package>
<package pkgid="ee436d3eb86c6cda7980a950f20bbc69c93f51c0541e7bdda3fd870993e7ca91" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="ae56d04027e3db22e72dbba64922d50a539391927d0ec67258e6b172cb3750ba" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="ead1e37f1d7a6325db613f4318a0c176301740513b0fdf5c981f6e5f50805810" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="c05c3d02c33d3c8abab2e0ff97bd2ea8007fc13c89d8d768d2c088e77ce9fe56" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="12.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
</package>
<package pkgid="1c117b15aed8880f090135d0f24a67cc299244f2a7c72023e60a029ff596fb0f" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="15.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="4523404a4441dd308e97140773d7acfbf7157033b2691780a1cc5982c24c1548" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="16.oe2203sp1"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1731067200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
</package>
<package pkgid="aaf3ff909d886112cacf7068ea09f2e7c4a12675a20d78f5b5c9875994057b5a" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="5a089401e41b2ac7fe77fe1cb7ab917b4bea1c288d0a719c8ee1f8121efb3b62" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="633427b5ac0db59cb1c12ae0b774d8a9c6bddaef4f992468ffe5227f55dffe9c" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="bbbbb2ddddc9fd2f841f346547bd2bddcfc10b9677b6dfea0528c9f94df0dec3" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="12.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
</package>
<package pkgid="d75ec394da46a81e912b2071a507dea1e357211a67ca398d2bce7a3dd31f565e" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="15.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="e96dc5e4324f8e65fba23164fb3586fb0757b7a8a1a500d47d710b6b54c01825" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="16.oe2203sp1"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1731067200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
</package>
<package pkgid="c954d364d5e92d5c2fe53d7a4900922b8dc4b10d987512359d7495359e57cacf" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="49ae4dcfeb6dd5b6af4d607a740ed4a83a6378d6fb8d06bd7587e20d79a3c168" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="37d78623d50a06507c72318a28f8ef3e669d0631b642b8f9a7b517cc22ecc075" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="be73fab2729508791c90a7c96d37c071c724750cc003c16c09d19a70c7550ee3" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="12.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
</package>
<package pkgid="4549aa97880c6f0ef7463a6b2444fd6da5a79215273f2e8c1e1bd1ef6cc45f08" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="15.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="f01b3d8420b5c7a5e16b9b075b941e76c7bbe0306884a8e4de465a8c3b55674a" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="16.oe2203sp1"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-7" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-9" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-11" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-12" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1730203200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1731067200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
</package>
<package pkgid="86a6e68e3c94eef0223264d772dc0507f9b7064b24970cb4116c1a8d0f889a61" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="5.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 9.55.0-1" date="1639224000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 9.55.0</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
</package>
<package pkgid="fe496a28103c9b31d74afcee52391a144d384e6703f6e8dc28b290c0a23fd5dd" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="6.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 9.55.0-2" date="1657022400">- fix CVE-2022-2085</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-6" date="1703505600">- fix CVE-2023-46751</changelog>
</package>
<package pkgid="00c9c779f6f0b87db515c5f8bf75186bbe3939c195d2f388e5ac72e1e7d09d60" name="giflib" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="f1d2fe6809ba4cd703e737eb87752e83c89cd1242fe1c352a260e570d5344adb" name="giflib" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="13df0f4487cddd8cd79d14eb89e29c2c3fb3006f602fede401bc96d42eb9dd3c" name="giflib" arch="aarch64">
  <version epoch="0" ver="5.2.2" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
</package>
<package pkgid="130066c6ecd7c090c60fe9ffab9ac8319134c35094ac600c6143adc48b815e8a" name="giflib-devel" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="98573de2da076d4788d39058b9799cd95af1a8d07b58b13f6493a9bb86900414" name="giflib-devel" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="3292f5d43c52f3f348be09997d3a19820e25b873d4506d6e4d198ec43a8f3218" name="giflib-devel" arch="aarch64">
  <version epoch="0" ver="5.2.2" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
</package>
<package pkgid="f9954ba7a6af9115fbd2d782bf95fd0b00cd3dcf3c45a567ee2d2d348c9bf88b" name="giflib-help" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="23ed28a53bb152e55867715ed4473e6d8612fff2d23ef96317b6fbd757574c16" name="giflib-help" arch="noarch">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="f336515591c5e421420613a336a0410d621bbf59ce010fe87355bb1d0003866e" name="giflib-help" arch="noarch">
  <version epoch="0" ver="5.2.2" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
</package>
<package pkgid="d26889c50c3efbfc82a42f6968428a1d3e7e3339bdac7984bd4085be865a9a56" name="giflib-utils" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="7.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
</package>
<package pkgid="e45c118ba5ed1d377c4a63a46d1282fba2cfccaeaa0ef635a34b43a895551ab5" name="giflib-utils" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="8.oe2203sp1"/>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 5.2.1-5" date="1655294400">- fix CVE-2022-28506</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
</package>
<package pkgid="3c7617236e10acbb3a96c1cb17d64788a130611258b64628b4b022d12f455f06" name="giflib-utils" arch="aarch64">
  <version epoch="0" ver="5.2.2" rel="1.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; -5.2.1-6" date="1661428800">- Fix rpmbuild error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
</package>
<package pkgid="b9b6e951d5a2137f3953ced4b09dad3c2d6f30d75bc6513f4395d7451500c5a0" name="git" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="64394081906fec9b52055d75da782aa37a480dc77e0763ca18d32303572355d3" name="git" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="ca7444dba1e7339d72a50f8ac610601ce1074c810295b1e67cf06d91308e0c15" name="git" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="fef72ac0f07af8d7d32d973363851dfe8adb84d76044f4e8294889455e23ba46" name="git" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="d95432b7211cb9bf0bfaeea50159c8b39846a4c551461509c654692f40a80a30" name="git-clang-format" arch="aarch64">
  <version epoch="0" ver="12.0.1" rel="4.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 12.0.1-2" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-3" date="1706184000">- Add Buildrequires: llvm-libs</changelog>
  <changelog author="liyunfei &lt;liyufnei33@huawei.com&gt; -12.0.1-4" date="1716379200">- Fix the x86_64 rpath issue</changelog>
</package>
<package pkgid="f1ab65312cce45eb205b014c1f6608a2a87a51562f2f1ee71e6da3847917c7a9" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="d979fa0fd50ab3d03e89f04ce8df11a5281f2988d316bcb5ca13b4e9a8bfe31e" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="9fb94f4dc3fd4145c38e06a648e404f56add2c4cfdff5ec9e7183ad4399c643d" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="6e18fbc94b8ee3b9615b5d3fd9c57cbf324a79403dab64e4d0ce95714efd6a84" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="564cdf4d36da381e8c87a4732377642aa3baba484c3d3488046d28916a5c5f5e" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="a027cc07881b0b8fc6312325e07e9cc1ade1120fc559971f0652498834f949e3" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="1a51ee7ac1a09ac217b3fd33f93f33d4045f907dbd18adc0133c0eaaed31501b" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="2c7ee1f39b2b7969b54fd624ba9f0a81bb511229126dd739833029d4279ce65a" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="63705a622243d3c57c8a996afee13ce96a90db46ed0b18a785aeee1cdae98050" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="8c428ff40defdff60b11ae2b7b7f3ad24c51226ab125b8e884ce0eee1965f97d" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="6f8602e15ddb8ebf604eab1e1da1051a0b7421f0a6ab98ff870f42a8c5960fb6" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="b61395c1d4552c4636b546e44d95d586957f3182325d040fcd89a6d29f5eedf2" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="0dfb992afc985e1c3c3fbe49f476fef09fb6a2da01296dd348044e3cef537b17" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="c6682851efe60fe060638716b210f9d7a9450fa1b1d5daa567f97a7177042de8" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="b6246f8a88b6ccd615c89d0773a67810c307ec59d2e2a251aff615654672339a" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="e845834791121b99dee5b3d5502b155f69392f1d9e8e1f27f60658cda0f11824" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="80d73b70499fde34329313613663553e0cc797d98f2f6e5d6d0a4d1e670f5a96" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="98f74720f6aa697f4fd64794872684bcd5b4c30cca009bc1fd7b96675bfa77f1" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="57c960abd90096bb1a0765636083647047c082bb413582e59bd271453a69f09d" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="5ad2f638c1a8c22264cbb54fec75bcd3bda33304b06edf25c6699c902ee0f4ff" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="bbb8486ffdbfad5b4fc9272410cd9d21953686cc652f80599ba6d80b6e71807e" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="4839e1af8fffff8b65d28782d051564a22f4ba893a440b7352b2919562679dfc" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="958a47427e1c0dea4b7ce83faac451fad7122ebbfb4602fd82358f1735976fe8" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="207ab368bed8a5702d07f442e003bf5101c5ba2b851cec9e5c6b0e3a0bbe5ba8" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="0bb4166372fcd724606dc7057b76f1c8f1d462973889e9eeb43e9d71affc51ad" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="1fb5b97f48278b86bf4b2e7780e19d92992c578898947bf5de4d65eb4c457133" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="04856158e8e01c625984c973ae941cc0bbf15d4edfea187b4dfbd382a9120865" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="f2163057cbd3fad11eeb36721cf75a6548400a6f4e6a95a4f821ab0f8e082526" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="94a13975246fdf62861032d824dcb3c00beb3d66f12d59657b349e40022d52f8" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="d38b81f53ca7f43cc8595f2c945d4e0d78fc4c1d02e3842106df4bb020f801a6" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="751dd1e16fc237d328319270c634fe9953cec5d46d57fec5ea9f1ad9162ef239" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="f1d9a22839dcd5c254731549419bf43901f083426317ff35d96cbf1c6568d9ee" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="e03a947499268ee2bde5ae3d9d44f43d0cb78e78edcbcb54a584525db8bb86b4" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="a91528defb6fb9bbb87f526d434c0eb25ac182a030de9218efc2e1c13d9d463a" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="27099bc2da06411d9429a305edff6f0adc0ccd9e24a79156d7e28903578a0924" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="21fa1af321db5634fee7d68db2cde657a48c9e8943ea425b7bf91139f86cd2dc" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="693399860df9c7eecbb0ba83320f1e62bb592f2df52e61b18d0f864ebee0db50" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="11.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
</package>
<package pkgid="991b4b0a01de878592dd4cf7d7392200fd182dc1e5e25669ff8737ded5fb1b25" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="15.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
</package>
<package pkgid="46098f1f7eaecf89db523c71e4fdd1f1d65791cd8398fe2ad2222f07da22e17d" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="7.oe2203sp1"/>
  <changelog author="panxiaohe &lt;panxiaohe@huawei.com&gt; - 2.30.0-4" date="1622203200">- Fix CVE-2021-29468
- Add gcc and gettext to BuildRequires
  - necessary for building and msgfmt command</changelog>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 2.30.0-5" date="1626782400">- remove unnecessary BuildRequires: gdb</changelog>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
</package>
<package pkgid="51a8b6761fc9e1271c29e202680bea533e10c39fefd0cfc4245a14578276d95a" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="9.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 2.30.0-6" date="1631275200">- Type:CVE
- ID:CVE-2021-40330
- SUG:NA
- DESC:Fix CVE-2021-40330</changelog>
  <changelog author="zoulin&lt;zoulin13@huawei.com&gt; - 2.33.0-1" date="1638446400">- update version to 2.33.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-2" date="1653048000">- Type:CVE
- ID:CVE-2022-24765
- SUG:NA
- DESC:Fix CVE-2022-24765</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-3" date="1658145600">- Type:CVE
- ID:CVE-2022-29187
- SUG:NA
- DESC:Fix CVE-2022-29187</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-4" date="1663588800">- add subpackage git-core</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-5" date="1666353600">- Type:CVE
- ID:CVE-2022-39253 CVE-2022-39260
- SUG:NA
- DESC:Fix CVE-2022-39253 CVE-2022-39260</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-6" date="1674129600">- Type:CVE
- ID:CVE-2022-23521 CVE-2022-41903
- SUG:NA
- DESC:Fix CVE-2022-23521 CVE-2022-41903</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-7" date="1674907200">- Type:CVE
- ID:CVE-2022-41953
- SUG:NA
- DESC:Fix CVE-2022-41953</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
</package>
<package pkgid="0633b801f965c4d1571f151511418576a0f1a7d91cb07ef931019806c3683f7c" name="gjs" arch="aarch64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="7e3f1974c41c9b57905f8812f59dfea4641941ec073ab7bbbdd6a2010730be5e" name="gjs-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="8e856ce1758567e6109717717ec802e73f4d0d54e2f56c258301c02aa9d168d5" name="gjs-debugsource" arch="aarch64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="d31c06b179620534cc812d4d201e3745729b1b3bcf86039bf6e90d5684c0da4a" name="gjs-devel" arch="aarch64">
  <version epoch="0" ver="1.71.1" rel="2.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@huawei.com&gt; - 1.71.1-1" date="1649246400">- Update to 1.71.1</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 1.71.1-2" date="1708344000">- rebuild for glib2 without sysprof</changelog>
</package>
<package pkgid="c7bdfe93f08b01de381a674945e8f8abc6d239b4b80a3ec41ef4644038319878" name="glade" arch="aarch64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="202bcd505b441e49a5108bb4fdb3f029bb47479f8c6fcacf0981592025b95b7a" name="glade-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="c73d116e43fbbef423487f309a56818f6964596d1cb2aa0467cc49abcea8fd0e" name="glade-debugsource" arch="aarch64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="a42c4d078950b505a90087c736e094b53f65bd5ee71afc2e47323b5ac9a16af5" name="glade-devel" arch="aarch64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="cbcac73181c198aa2c3a6d8609cae6c20c64615a8118f872230df777639b76f6" name="glade-help" arch="noarch">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="6907cc335203b476c14bb9c7db05d4df3d88d7227d6b8222ca0b5bbfe4f74bff" name="glade-libs" arch="aarch64">
  <version epoch="0" ver="3.36.0" rel="3.oe2203sp1"/>
  <changelog author="zhanzhimin &lt;zhanzhimin@h-partners.com&gt; - 3.36.0-2" date="1647259200">- delete old so file</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 3.36.0-3" date="1708344000">- fix CVE-2020-36774</changelog>
</package>
<package pkgid="9742df980aebafd28d6e8dbd6e422905e34e60fd8eb8846fa4741f6badbe930c" name="glib2" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="b6671a7d963d76a072651be426473ca955f8e6b6674c0348a1bd347ba5cce61e" name="glib2" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="da40a5d46b58a47e90d1df88d23d4b9a07f0cc2782230144234b60462dc80094" name="glib2" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="3683683bdbcb0d13b349973017140990ff645318945e674c92054ef9e1d9dd01" name="glib2" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="caeceb994a4565f256e8b247e71eab78a980dbac8e5d58160a73c016f3605efa" name="glib2" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="31019eecede262e25432d503b3c3a9bffb7f47bc30ea3ddb81fa1033d39ffecd" name="glib2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="170b09523b7ffaf247f69f356677f88bcdeffce4a0624f3349e8237e0a92d23f" name="glib2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="fa05775412d177f8350c2c393d1bb8d0af6223c010ad12c170cea8b5d994a042" name="glib2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="2f659bd59536c7b467730078acb811ecdec97a4a7be3225972a0f3b6147d351b" name="glib2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="fe02ef4f3597f9009e6cdce269e8f1dd69698fe6b24f30e19349538abd9ca09d" name="glib2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="14fa2a4b0033d3c18adc50ec515e6978e37fd1e7402c40875f125b5570c598f5" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="0612ad40a70467b403d7ea092b9d23d7bf53baf0a912cf4d5ac688b940fc04bd" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="2d9018ecf36e53450febd68c5c47193a18b07b9a6645792afb53e961c219d899" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="1555d599f29f73e6be52cd1adab3a84b807fc10e9890d7c26055abbab9590446" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="c9f99b0c9de0ec2df009ddf6e273e1b4a7dd6e39bfdc12409ba465521c4964f3" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="5de2332d3f0674140a565e79f233c6cf7b72292af75eb3609bdf77e1f2c1a512" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="996af101d12f5c21c3a7a94f43ef1291dab8a5e2747fa7e5f67d53ef5b11c9fe" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="78a694c397121b678f31ca74783e18b0aed9830cd7b87fa4b8d82393aa10be52" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="e224602246d49de193382f2e3a8298c2f08f41e28099b32669f7e5934cdba959" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="61d11383834a6d0aba25abcfc556887e30ee35a3e1ca7b3b26fa2b3363103837" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="47922a1a356678582b8885bbd6cbba341d4be7f9ac8fc8eea73bbc8676e6108d" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="f8b315ad1621c0d3c6f8cca844d38f92cb5407aa8e30c8f707f0171e46222bdb" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="a9979a48e3b286c1fcc0b6dfe38530557904f907b6617110fe7db3b20efcc26b" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="773932f47e3abeb8551cbbf3834f3690d710252efb8e38fc9dcdfeb595221fcb" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="7befe3e87fda592699204bd6ff0bc1af8f64c803a8011faa3e865c3cfd4db7ca" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="89d0ed8b958a8e579b290cdaf26945c1d1967fe01e58172ce46ccc5043c5c492" name="glib2-static" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="f402d9db364e5c15a4624175c7f8ed8762f695d528bff0a3de25cedf48f40905" name="glib2-static" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="cdb0f3313612543b3e326d5e45c1c6fdb07443344a2ba5b86b179a9a889632e8" name="glib2-static" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="89e52f6e67fc535b5be086f1cec8439328b1a9f5f6b62e9d9499068d73369d80" name="glib2-static" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="419b237ec7db75a3e88d505273ede108bb0655aa18d10e4ccf4ea97b5a642e4a" name="glib2-static" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="08959cd38ab8bf775d31c46b71f84195c2d80203d57d46c72a8e56aaefd572d5" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="10.oe2203sp1"/>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
</package>
<package pkgid="2853401d8990c892d8ae2ba536c35866fe635d7861286edb3f57241cfc568517" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="12.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
</package>
<package pkgid="b8831fc728800fedddb4a0bd602fc3bd75523d0eeea7c4f1dd3768d10e159de5" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="14.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
</package>
<package pkgid="5229bd1157b45e3f5e3b534d66e5fb2c407171abd75a50e411724147f415ac35" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="15.oe2203sp1"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-9" date="1678795200">- fix a use-after-free of GDBusMethodInvocation</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
</package>
<package pkgid="548d8cc8c65d969a3fc815c6c6bff264f54bd9e6fa6eb122da7c7138f05dbb36" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="8.oe2203sp1"/>
  <changelog author="yanan &lt;yanan@huawei.com&gt; - 2.68.1-12" date="1651147200">- Type:bugfix
- DESC:fix issues found by svace static code analyzer
       fix segfault,memory leak,EOF,arguments leak</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.0-1" date="1654171200">- Update to 2.72.0</changelog>
  <changelog author="lin zhang &lt;lin.zhang@turbolinux.com.cn&gt; - 2.72.2-1" date="1654516800">- Update to 2.72.2</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.72.2-2" date="1655553600">- remove gnutls require</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-3" date="1662379200">- replace pcre1 with pcre2</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-4" date="1665835200">- backport some patches from community</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-5" date="1667995200">- separate the test and static package from devel package</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-6" date="1672142400">- fix some pcre2 error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-7" date="1673352000">- adjust pcre2 requires</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-8" date="1676548800">- backport some patches from community</changelog>
</package>
<package pkgid="b9da44b1c2ac5cc8f59f1dea85b2de1c07bea47e5526ae268422a440fa7a96b8" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="a90acfd29fe89860a5c5b145b3b80773e0332cda74bb64d38a02fe0553345b82" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="9bda52d806908c85bf1df4e6c4794ab8e86fc6956925b410d4675e34f06f94ab" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="09ba2d4d38ff834b2ce2f4d9cb449a55c540965d484fb4079a098283d7c83a2a" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="63903e5c687c2ab7e5ff73dc55dd52215a1914b9a7331f94d9e991a6b9c3c394" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="ccdb4136865be7e01cf900555e42ea846be4c71204a81d1b857b5461ac424dc5" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="bb9d2045fccfb465ef98d977b5766b6d8a74f090bfc0752351518d06e69e1923" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="a1386ae95128e94d8e4b78b870ea5972e0e0aaf8e32432ff843c137d34363d0a" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="834649684627bd3a6ab6e78513053965533860aa71b7e5e55a39c004de93895f" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="54b11369d365a83694935c57b49e45613458d00889947e55e856bbddd9018726" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="5475346b1558078d7666d93a4577d636ce5e2fd46349ac6bb4dfa421ff3f6eb6" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="a8b5f65fafd8c7cc0ebe22154a12ab71d1bc43f66b522fb3e62969afe2e464f2" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="734a3f09ad5f99245abf1f189fabf55c5760ea9a424aee0b41e0fb41289bda4b" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="8110a8558d0ba2a2d46d8e09daf242622e4bbcea6c626cefe9083c5cc914b5ed" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="5685e05d83ad83579b9a94bfaa759cec6635a2f31896409f6da02b6eb27dea0d" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="335de9c7a30bf81a96a995d3f5910dfdeeaada052d0c1cb9248a20515e6a7661" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="10f82a116762bbdd88d412347adb8c86a567c32c1e3caaaaf77df6e537a031f6" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="b31f66a8e3f1dfa3595411288063f201f9e78171053f90310228b31625fa2867" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="75d826e1cee950a577a33d1c6d13d05192a3cd8b38cbdfe229393db8aca12b09" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="83d7950bce7bd44094ccf9eec243ebe38c98f668429652bc13a6a7628657b28e" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="65834cbb84f9acb7d3f44dd3605887e0bd7fcc761f74f4e939a3e657fe212759" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="a3191065bae19ac590d3926842a57b69dd88d4eef38db40d5ecf95d4846ba64c" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="c46c3656e82172f2e0ffd443a1a730f54620b7c8d01178cee363170ba2f381c6" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="70c9752d0adb78bfbdd0a9a2ea5d176e03988201750661fe03b76013ff4cb8b5" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="c2f1c1e427021f983f10f091977114c76d8dca4ed33271affb09a8eb4995d658" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="77b41ba5f76985474d0f41a109563b1016ab58fdf4cfab235877837389649450" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="c873aa15e86d593a2a381d5fca72717ef7158de6b4165bcb4b02b70a787af2ff" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="5ba906d1b35fe211b0b76e05d64b3f1cd1302407a86acb0bfa41c220fdb3449a" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="e2f45b53e63fcdcb79f0d7a86697f879921fc1dc7ff5e5b0f9103385821ab0db" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="432621212e76f72bbee8170b3b18668de6cca0765c6387af06e0018f254fbe2d" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="85d6ce701720c046a50a4ba620fe3898c70ca2752ba2cb278bbcec5510f68695" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="280d504ea093380fdfefb3fab3fef3d505981ae1eed025dbe10a9a47f6a5a1d2" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="a7029524b9fe895582a38c171216b7ba445d5e46071d2082603d7342ecf761c5" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="0b674724fff611c2a42e5cfbd98f24def50f7439d38be438872586f44b83386e" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="096bdb8a9919798fb0e8e98eb4825edf5d39604486d0de14d9acdb46c54ee7b8" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="693b926bd6409310a18077488c42a684b0bc086e16badb5a92dd2c67139f26a2" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="9345271fec6c351ae5591a6a44c9d15959f05f3d881655ee12268adc9407f360" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="65b5aa0b9b9bfd73b8daa3e19d65486025954efc4c6c990e33839b1cf0165a4b" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="e20c64c82f0e225070089b928f8cd154ce044d8bba2fb9026954c31b1b711ef4" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="8a92b82b866fee6cc679836a6cf7c11754ec26eb8ffe61b9e5ffbdc98edc8f55" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="db6e4974e7d7cdfd1de227251d12eea77340147db9b7bb7e04d67645d01eb392" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="368b5d23e5310214146d1feaa15b76bde98fcdbf58383c0dc5202160f16e9132" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="fce7757ae95f13f491a1f4375c3708997160c0c373f1278dc5460e880beb1791" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="6709bec84281553720f2b34c8af1d8308c2ada1dedc39d68dacc50ba4c1ebf93" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="b0e0785c2b7e585eb690160a9c565f61d9da45085a0e5c6599674e7f9a0e7a93" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="bcfbe0adb7f07655acee2c194dac2d39dc80aaa861f33c811a916645d1092358" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="ce3740380bf0db812a603d05616fe617dccee50e12cdb61f110d59715a393feb" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="61f3ae7f14d1ff0d5fb709ab2eaaff865101815afb9a4818fc9efa3d9188364a" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="204f702d79fa4d669b9629345fbd7fb5a47c9bc2aa4e8d3484c23dfdd218c154" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="d7dc99ad9418ca7d5171cf871486104a4fea8c60282482b728e0a1d9a51abea9" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="22b52071a7ed4aaf1d253c1edf4856ac314b59412e8e52676420d9fc78bc6bd9" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="9eebf6afb38c8702308a8704ccbce2a18c577f18f64a0956cc9676d522efc159" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="20f029c1c506f8daaa2059c7ea87effc97c507cbf9616d7ba6fd222cc63338a2" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="768fb554d99516539d739be4997ae9cb71a385c0434e5029a1c8200b4acbd186" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="c608314304109c35a44ee86da8a4438ddb046c04845ec847e463690b9d6a4b34" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="31934f3456c24ec4c97d40715394c1d8782a19a164b67a2aa2565b6a599b22f8" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="1959fc8fb89a3a145c3c261fa32b41dd04d53c944b2c4f37ef9f2214e772cb98" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="a0ef175d14e6d78be705e15399c5b7daa8c7a7b9c4f17b9a9322ce4478598fde" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="266865ff6d5601817320090558da603179d6a2bce5df739b05fca4b55dd0559d" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="020cfec5de32b78fb0c5cd15b35871b4999ab8f040128e5ae5c4953fafd2a449" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="2957ea1e319897b9b55444619d96c5241165e5832220ab911f1000310a0a16ab" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="168a3a623b0e18b7d8f738a29b4718b9bf4aafab4cc1a0b1bcffa10d93aa939b" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="e7486720cd8f61c334a22e0dcee76dd16ff13cf6cce273e71de47801ec241f9a" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="5c49650fb475dcb01441a5184cdf2d0c2cf3407e55d20e5e1c8c4eb16944adf1" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="2bcfade6a883d45d569a2dc3e3712630f4f3d9c68981356da1ac3732266e6b0c" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="8acf618508b2037d25ea97316d5b6a741bfef40d5af42d60d8075165e1210da9" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="99eebb508437f7c2ebe8f417ba0ec6c67bc39a711ce7199ad71668b9a6f2ab06" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="def369ed130b0126235659d5c200d9ec76a70d87a01f6b7360e98faaab4202db" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="28a1fda2bb294f958a804fe61a6b510e1ac129faa8084d558a5909e3d514d4e7" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="d121e687e66db169e63a74479227dc31063ab032e61158b4194c82d73009011e" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="e572dcf0e4025af8a14bea511d7fa40cf7130f2061d67dc3d6dd0d9d02c3e3fa" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="6f2d91dcb07061c0851d1761497625ccda2a7cd063cceb4872268a2560ad9a35" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="cc9baf73c1f097d875262411e1b9bb964810ddf871d7f4b476c1865879b4ee98" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="c65dc0b180e27455271b06565d4011ada0d3ed5a93ab5c8a8ca7e0db1aa5346a" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="ab1639af9dc882f1d811ea6bc8f7a8fc180aff9e28cba06889804b83ed987039" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="4c4f8ae6c9a2b612c8a5aab242bd5c0bb57c9eada14e2cce95fb00c2b1fc4fe3" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="27d5e0ba721db53e113a497d907a478a6bec49e730dc6a630135b834e8f2a08d" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="bb80084ba7fa4eeec5d85157977e36ea58774a1c0d7ffb6a4d94bbb2741ae4a1" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="44e62dcb129e52e00331a3384503fea9fb86c8abc382b7390d909a0de5e652f8" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="f9aada7f2a94bb90f10875f608baa040ab08881e5e4aa8b7355cc986cd0893b5" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="39ae64878cf0847fdf4371f07f174cfba51f0d7aee68750e683370064c4dc3f5" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="7ddf4b234ac1f1595b5dfa02667db919090c4a311ae9a22ad248b7afcb659ac0" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="8ce0ebc9340f92f7bdb67af650325a3db482dc63f56b2aeebe8e1bad171bb72b" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="4fc636558459a48c1b2adc2ba4d1d691f597d4d3f7c27dd3414f2c67857a034f" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="8b15e9aa8c7db05ebde2a33b00903cb95a149a4797a7347a231cb534156b7e61" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="35d45187362956a898307ccde4133b4c86873f5c6301d6cfa88c9993f34d112d" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="17320a7be520ee795c6a1dedcc089116ef0a819348c50811b78db9b828e09cbc" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="aa48522698a9d62bbe83f3139e396e608952438a6735a059c40a3f2a56ead79a" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="368e88743a1daee3084d7f39dd3297587c034a5c0f61032c9cac4da3d1335e6c" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="d9adf1a80324d0f8d2580ae2761c82a7391b2d0da45ac884bfc297bace7c356b" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="db37325ad1bc1d0ab6e9e09603498e5356193e6ff0cb998114cf9e00a7aea917" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="2d65badb7a60d99194554729eebb3baddaf323506d249fcb7bb3ade4e3aa66e5" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="fa314dd2001cf9ea56e3a0cc0f4523bdac0edaab3a2278e794a988afc02874ca" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="004261d883bc7da68339457f79c7b52ad762eb3e840624647f81d68b2698a77b" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="9171893472fa6683c073f12f7e45dce4536bebe9109cafd9b0b4a4d430adb535" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="e017b1a8fbb5cedd88ca812e1f355fe5a1487bff52b67ea81869e33d1514dd30" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="d9a958adca7b84850a57833122c839a5aaf7d476a0e365e159d043205319293d" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="b7d7442ceeebefa9bbd3f48ffb1aa1b064cdb29183f481217ae1f22f227169c0" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="8cd3d00cbb3e8eca5bf20dc6e4d542768a8d38f5cfeb2916b7347be43f6906ba" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="1b69a8ddac7f046abcd195b53fb2b094a86ac148079bef5b743293d88146dca1" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="5d75ab9896696dd89f89d72dc7eadcb98b6c0c1efd6a7a54ad6e3e89b6f1e29b" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="e4100c64ab7c58666624746947bf07f8dc261ca479bfa4968ffd9d1c7927c0e0" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="ed8e98c7714c1fcef7514da843de01df8887bdc12b67627ca16a9fe126b4f0f6" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="5eee3debacec437a70c4fbb58a037fd53f5ba9ca3ad87874a0e6f8c49f6ad27b" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="60fe2be4fe0e432cca1398e78156cc5814bb8aeac0f077e767e458f5116d0a03" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="04622c13f762fd368064d6829a803f6f12610d2bf5031bd4098236e5a5fd9385" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="ae97dc0553bd70f6c271a072b9247dcfd394c44ce020ea2576ff64615cc206e5" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="ff84e688cfa9472082fac48cb545374c87d46dcd27c5a18c6e2e4421162ccaeb" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="36749a86c983c1e47ea6288241a7f3e649dc9326ab43603e2757a4beaaa7f517" name="glusterfs" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="0ec1aae716d0dcba6dbb4ebb455726c0db57e3c1e89b42d00c652d0ddad635e1" name="glusterfs" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="8d8014354c7891aa48c43137325a20dcb4004f0bff5a17dbc3a28182bb9990c4" name="glusterfs-cli" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="d02b443bf3509c9ccc09491e92ca7ce205e6073d6e9c3e41f5665a3a4ab388dc" name="glusterfs-cli" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="d23ad6e5bf3ccf392243323161feba6df6aed4b945aad0935f9bab06d2e635d6" name="glusterfs-client-xlators" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="846914ff700f7b70d69b154e4ea4b787a249e0daa75d4aa3c87e5183ba94f7be" name="glusterfs-client-xlators" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="11860dd46f4068abd02ae35b11e12b5a13fc80d765e07b08412208b88239e692" name="glusterfs-cloudsync-plugins" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="e8a0485a69f45f62ee4913cbb11f49e4efa958e3f46a6dfa84ca06f1733aa24e" name="glusterfs-cloudsync-plugins" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="38e2b2741dde2966cd237beb1dc4d5dfb03dff31f1e82b2bbde35237ab60af2f" name="glusterfs-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="d891f55ec973d46698f01974c9527280c9320aaf94906ad27a13f47baa8cfe85" name="glusterfs-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="4e5325b1590dbd5c7de2a317783ca50d9f4f33c17dddd658a9a651f92d343b1b" name="glusterfs-debugsource" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="7d9a723ff417fa93daa57c725733c00ba885aff1ad2430cadbe2355bb85751b9" name="glusterfs-debugsource" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="c95156fd13baf2b7a063ededc2cd1ae2513841ed91fb563d7c21be2e95dbc01b" name="glusterfs-events" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="05227e146336096ca53683144f98acb06f620a888f0c8576d0041bb18e39becc" name="glusterfs-events" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="4f068743d8482eaa83f42617a4943cc0ebec0a7f753218520b5c1ee28def26a6" name="glusterfs-extra-xlators" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="2832c22a29de7a0c64fb85951f3c15ff21292b38a56a7819c55aa2727ae86688" name="glusterfs-extra-xlators" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="25c479eab3e75d727b2c88c51c4b088847513c902ee7a7be9c1eb213c7336e3d" name="glusterfs-fuse" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="72191d26cbdba0634ad064ace4607dd43934194366c374b52cfd815b7f148fe4" name="glusterfs-fuse" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="b5c7f03b82583ae0d1ede11a9797c55e6c75e0f5ff859b2eafa1420bb62b4f71" name="glusterfs-geo-replication" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="8de7f2be3aaeb13f6b37971c0c5d48c29e54b48215dfc5219d971104badb4769" name="glusterfs-geo-replication" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="e1fadca1e57d44d36d9b0185fe680ff177cdabf129b78c0f3d6c0f63bdd7dd38" name="glusterfs-help" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="238d3131c3f6bb95dd31000a4aa88dbddb1314209156d266f62128896890e18e" name="glusterfs-help" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="f3d734f32cd6e4338bae338496627dfa7aeff6cb3f8768fe93f96be23d5241a7" name="glusterfs-resource-agents" arch="noarch">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="3f0ecdd6b9e67618ba5bc55d77269a6ab378b5d1f61363b143284ae324c1ba0f" name="glusterfs-resource-agents" arch="noarch">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="e925f49d02e224b6ef4baf3a5f3efee0cd076b8293af85503564f2aba69d156e" name="glusterfs-server" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="761ac8cd851e10cdce878dff6361b140f6cf567b61167c9e50b99ab252523f16" name="glusterfs-server" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="a92420964590a041c2aa9910a39c150b97e216e5de629438407f40c5825a70d3" name="glusterfs-thin-arbiter" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="9a70ba8bd61cd18b12eb0b0ea2019dbe1fee19eb69e8c36deeedcfa9ea2e1ad4" name="glusterfs-thin-arbiter" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="8e3736d08ba33a7540e05e3979505c879f7ad296718be0ccb2d0709a2740dcaf" name="gmock" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp1"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="683d51d4f439800bd04ee9d33fc4815553784a74131381d4c5b0e912139bd162" name="gmock-devel" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp1"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="0877c0ea1d166b2eb1c742ac2527efd306451e730083aebe567180ffefa7511c" name="gmp" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp1"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="e710fdddad48e86466ac6a414833715a5613621744426adbce16bb8ee40a2f2c" name="gmp-c++" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp1"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="0ff77cf53cf89b2182803d38d04716f4cf92dc2915bf54de8c9854d4ed0e4c92" name="gmp-debuginfo" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp1"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="bfb9709a62183293c845dc14399743c7ac8a31dc6fc06ca1acfb99014d6e1a5c" name="gmp-debugsource" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp1"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="03097559fd9f536456b60d0344d6469e886b47cf8ffff9259028f35166529346" name="gmp-devel" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp1"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="8546f4e7db3681f204dfc676f0506d1af1a0a8fbffaf747927356497444f64d2" name="gnuplot" arch="aarch64">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="4f9f5ba6663b81d4b0c73543b688e118dd8537ce62cc0a0008bcadaafb73ee46" name="gnuplot-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="aae120b7dd6b09b3e6631e106b50e56a87a84dd5ebd8e4574d714dfac7c5bd22" name="gnuplot-debugsource" arch="aarch64">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="04bbec13d95a4f55663b416fd71616b926b2c8ede4af7ed0012d87d1c847fbb6" name="gnuplot-help" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="14.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.0.6-13" date="1669118400">- Bring source file into correspondence with described in spec file</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.0.6-14" date="1689249600">- Fix CVE-2020-25969</changelog>
</package>
<package pkgid="a03bd9faa05a732c7b8523847761d5909926a7c3f16ec24b9e35a79b72c69ad2" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="7486e27ceb4c070b32da8b08eb8f5c45766e497c3e8b268f21a89e454d3b20e9" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="2c8ef6383c325d908a45eb993d4abfaae588a57de42708de8f11afb8d30fa125" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="e41296e24634a54ae8cedf48771ae763b84d955b9a71802597a9d19cd6a992ad" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="cd92fd7c4602d10d9ce325647099e7de65f6dafceeecc2b70db652135b0d7ba9" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="41d6ed1e6b7739bcb9dfcfd5f1d33597f20c0346c7ae66ac3cb267f700eb12f1" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="1fb77324b550374923a2ddaee9b4e8be1c486e7e12402ff3ee10a33ac1113221" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="355289d4777180e8c89a79a3c974d19d697b4f53eb042a58170dd96e756ccd31" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="a0fd30e521cc4f62193605ceb62a79d16f6182693ab825097ddbdf51ce802322" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="42e39d80152e57ac5f8f2f5c5e25dc71f4ba3665ab8565c54c9c464a95bd0dd7" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="f0506adb3077b412c8727a0231590cdc6470a3a91258be71109bc5ce1200516f" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="84df212a957070393e3d1918cf2a5d8afe97ddf28834d4f9717c7170e2ea4e48" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="a687abd948b9b33d4d9d6f35cccdc17e04892f966cb4497aaed0141492ac2acb" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="30b2d5613dd1e82545d673e2ddc2548cf10e51cd59f33677ea2182a4d116e443" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="a836fd35f86e4b686f4ab5629fdb7267a639912f32b21a741140f375ee2774cc" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="71ce621c9c17e625d058424ba6f758e41c675fbb2b5ff3fd0bf59552a2ef525e" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="61edc163ed7926470638a9c38ea9bdc4db986ede80ec0d1f0b42abc5cd39ea7e" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="88318e29e0158444ec4ac9db9fa024d2bc9d565b1d513bcae52f0f423e21b046" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="6edf77e24c588d4c961f3007eaab06b429efffa6c2796f1f17a53ab0fbe8ad68" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="3ee8480b94d1c65fe92b791d88ce520eb4716d13aaf55deae66b956b2d606cb6" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="6ddcc405a09a27f459dc6094a7830581f5ebf27fdf11467d76458a1a099ad4a4" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="a93a8923e222632650f8765cd36119d72fcafa3769d461c72eda5bfb3b63a927" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="4437c6af5c2404f18c3a5222870499cc8a30f77255fbe7eb339d743f4feae185" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="942ac409c6746a66f2fad757c4073b5cdd334557bb8699f91c807c6e54be1584" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="9bdcbdb0d9af1f04614c52a723fb3c2df5fb10b265e585159cbca7e7fa4ca4b5" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="bbda290aaf7bf70fbbdb54223abfcfa61cf4eeb50752b68ff27efe3cde4c4f07" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="22a3a1a280cb297c11851b3c91becd15a69b9add954cb9d3243df2b614e43928" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="6813dd5226ffeaaf033962a174fa59c71653d3192541ccadf43eb2192e42803c" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="ba1cc565a2b2d5131fdb3bb2f46e3116e860a56b1eb87b3b199589509fd884b1" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="b3e3c5f10dbc1e598864be17fc64ae52ad2c5ccd8dcb80ab1aef6efee26b55a6" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="ec9b42ae4d2dd0227e2ba47ac4ef0347ba731aec34de31f3c102779879b3e233" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="10.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
</package>
<package pkgid="4839708d90d3bbee38a3d1a5964774589c55d5b17030cd994ca3c0438645df3e" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="11.oe2203sp1"/>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
</package>
<package pkgid="a23b078cc5125a327d69cb03649713af2caa693d8790877c94748f389d87e354" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="13.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
</package>
<package pkgid="d4016e2d68f857ed476c9bf861039a9f54ead5ee88e55fa9990033d18ecfe2a5" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="14.oe2203sp1"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-14" date="1712664000">- fix CVE-2024-28835</changelog>
</package>
<package pkgid="4bed53ea811f337f1dafac9e757307d1a2da4f3540ffe0e4dacf27d59d824cb9" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;zhangxingliang3@huawei.com&gt; - 3.6.15-3" date="1616414400">- fix CVE-2021-20231 CVE-2021-20232</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
</package>
<package pkgid="6a0145f93d2133556e500e13bd4310c0e616393ae96553c3af0a42d589082a20" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="9.oe2203sp1"/>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.6.15-4" date="1627646400">- remove init_fds test</changelog>
  <changelog author="shangyibin &lt;shangyibin1@huawei.com&gt; - 3.7.2-1" date="1640952000">- update to 3.7.2</changelog>
  <changelog author="tianwei &lt;tianwei12@h-partners.com&gt; - 3.7.2-2" date="1648641600">- detach the sub package gnutls-utils from gnutls</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 3.7.2-3" date="1661774400">- fix CVE-2022-2509</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-4" date="1661860800">- fix CVE-2021-4209</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-5" date="1669118400">- fix incorrect Source in gnutls.spec</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-6" date="1669896000">- disable make check for EBS build</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1676548800">- fix CVE-2023-0361</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1685448000">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
</package>
<package pkgid="034ba7a9871bc7bf63aebdfbeb0a0d632146efcd96391a724a31479a832edc71" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="14.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-5" date="1658836800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
</package>
<package pkgid="3147fa6936769e6b7fc5f0890ee96760933addcac3f1f02ee16eae60bc66918d" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="15.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
</package>
<package pkgid="54d2024176e665b57b1dc8f42f9c8e4d8cc29d9b8c866c150ead5a856964db8c" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="16.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="23b8854a75a70b0b0b935b39d404b5446a5f17ee357c5dd2fc8a43342e2213da" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="18.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
</package>
<package pkgid="9e3bfbe63fb7ef625f7e4c74fba6c851ab34208694977496a29c8aad3e2ab4d4" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="19.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
</package>
<package pkgid="73a1b21ec91dc97252bedb19230ae713948160ee8700050ec2b59a248f46e722" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="20.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
</package>
<package pkgid="34106ba7d522fec2fefc9681afd2f83d9f8f8082cddee1dbb7c4be38326263f1" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="21.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
</package>
<package pkgid="e99012ece6dfdc425cebda4c0cee75ee9738e55bdac678019fac5f90ad0203fc" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="22.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
</package>
<package pkgid="6414e32862e88008265fc97cfde9ef7a6182f6eacd645d92ae360bb8bcdbbbf6" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="25.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="3cf2cbd30ca74eab7db01915971853a1d99cc7ad6b10926f3fc1a80c83440d39" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="26.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
</package>
<package pkgid="85e869d548adba0b067efcf30fad697aa7cfc9fdb1dc9a5396550a07cf9919b9" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="28.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
</package>
<package pkgid="790caa37521dd6e397ead1ec55cd545f850fb521c0abebd58fd2c4aeddc9842a" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="30.oe2203sp1"/>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
</package>
<package pkgid="477c34ef772fcae52a9371a10f29fd3b8678dd2182dbe0d40b5ae543cca89542" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="32.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
</package>
<package pkgid="421e8c5b3fcde2bcfd0dfdbb405bc50f74c4e373689dc82305d4e7e003e07a5d" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="34.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
</package>
<package pkgid="0254bbb214c51d38b7002d52225082cd99aed23cd6ffad9f315bfedf12a0588c" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="694e803b203106cf78d81f1b2cc4cd2cc3f427465efebcc7b0018978f1bd5b4a" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="37.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
</package>
<package pkgid="cddee50101e62187ad19aa84ededbfe8afb0fd214802881d878469f5ce024234" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="14.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-5" date="1658836800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
</package>
<package pkgid="07d763ea3da9266280a343b70f54569533272306f2f3d412f04b82866020bc8b" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="15.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
</package>
<package pkgid="9ad8ea45898728f425a04bbc7623de0aa6aa7e4888e9154ffaef6ea767677d37" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="16.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="95704d7f27130ec29f87ea0cb56530d874124f5855b7860f2517e3011267b589" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="18.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
</package>
<package pkgid="0862e5e7ecb72437e243828b93defcf70c93f59917b5f384a5edfec42bde352a" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="19.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
</package>
<package pkgid="a28d34d1d6bbda91c1cc37c9a3835131ef13b8390e80ea63290c87a462fa3112" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="20.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
</package>
<package pkgid="dadd7222804e425e1c8ca0edc99fe0d33b839c2df9b5d5a00425150599bc7ee0" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="21.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
</package>
<package pkgid="77fcf55f37000f697bd1ea8848a2a013032c3f8bbedf5db0116ae8e7764ac288" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="22.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
</package>
<package pkgid="f8493441ebc144ce51d84a1850d93275f0e4cba89424b18a136f45b2a8acfe7c" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="25.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="60f4be22643a86e2ef8f7e30f49777af933e5bc15aede2851e5294f27af62cef" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="26.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
</package>
<package pkgid="e352a606cf6d43ac2c326444d56b96a1695a1ebd6cc45b3c206c2c971ac5eaba" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="28.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
</package>
<package pkgid="fb2317019577b7fb86e542e38af67577aea0dc7d843767a3a4d206119315dc86" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="30.oe2203sp1"/>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
</package>
<package pkgid="e2610a311d1db5b98f9d197fa1edd65cf3db891ec46f8f1885992da0f87ef727" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="32.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
</package>
<package pkgid="0ed017507a0252ef47f6bbb6007168db7696f448edf873b057b4b3784470759f" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="34.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
</package>
<package pkgid="6beafe24b1fe90c55dcb475d2fd573f23f11c85723eda75b2e82ccb9ab182d29" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="a2b472fa5cb679ca5649d4678b97eae83dd25988721691b63ad44cb3d1d51acf" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="37.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
</package>
<package pkgid="11559742838082e697a0ef71a4e7f2ff77c1d1b74466131882aaeee6390e2c17" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="14.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-5" date="1658836800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
</package>
<package pkgid="fc1d0b19635a3215fe2226ce8649605e2de61a73a4916ef70ffabf6186bf7246" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="15.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-6" date="1659960000">- Type:CVE
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-32189</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
</package>
<package pkgid="cfea319d5defb25c2efcb79aa6199c5b9cb5a32ff3f56e6d3ab03b61a5308cd3" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="16.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-7" date="1660824000">- Type:CVE
- CVE:CVE-2022-29804,CVE-2022-29526
- SUG:NA
- DESC: fix CVE-2022-29804,CVE-2022-29526</changelog>
  <changelog author="hanchao&lt;hanchao47@huawei.com&gt; - 1.17.3-8" date="1662638400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: golang: modify the golang.spec to remove unnecessary files
	from golang-help package</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
</package>
<package pkgid="8e65f26ee57aadc478e61dd1ff205d659c672e5e4c56d677736ed605e4d39a07" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="18.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-9" date="1663243200">- Type:CVE
- CVE:CVE-2022-27664
- SUG:NA
- DESC: fix CVE-2022-27664</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
</package>
<package pkgid="a44fdc7a303e8d432947147ddf6c4c6b3f03d26076f63a3690fa688c015534b4" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="19.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-10" date="1665403200">- Type:CVE
- CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
- SUG:NA
- DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
</package>
<package pkgid="63371f92f71009b226fb9829ecee25bfb876bd7e22ce264a0f605926d8173c8b" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="20.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-11" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: fix CVE-2022-41716</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489601">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
</package>
<package pkgid="a612de1addafe25e13ee69261faedb10b250b236d1a1dabd5dafeab7fb08a37f" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="21.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-12" date="1665489600">- Type:CVE
- CVE:CVE-2022-41716
- SUG:NA
- DESC: remove hard code and strong dependency of git, subversion and mercurial</changelog>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
</package>
<package pkgid="ec77c4b64f13a227deb34c44be3cc091866ff59f0e939e2b06e42f80e72c1f48" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="22.oe2203sp1"/>
  <changelog author="wanglimin&lt;wanglimin@xfusion.com&gt; - 1.17.3-13" date="1671278400">- Add string cut</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-14" date="1674216000">- Type:CVE
- CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
- SUG:NA
- DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-15" date="1679400000">- Type:CVE
- CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
- SUG:NA
- DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725</changelog>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
</package>
<package pkgid="304180663e874fe4496da1bb0bce6b9b22ffa53af67d44f0ef82f45892fb4c04" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="25.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 1.17.3-16" date="1681387200">- Type:CVE
- CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
- SUG:NA
- DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
</package>
<package pkgid="dc110834ae7067b2eca65fed05ed129bf62089c45ffc6ace0ba8c6c2ab75e03c" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="26.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.17.3-17" date="1682251200">- fix bogus date in %changelog</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-18" date="1684756800">- Type:CVE
- CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
- SUG:NA
- DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
</package>
<package pkgid="df917d4ab880909b321b9b322a16b71b19e1f439c1e9e14e7b4afbae03bb25f0" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="28.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-19" date="1687348800">- Type:CVE
- CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
- SUG:NA
- DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-20" date="1689940800">- Type:CVE
- CVE:CVE-2023-29406
- SUG:NA
- DESC:fix CVE-2023-29406</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
</package>
<package pkgid="3ed07da4f793e50f9b7e1e14ae1f33cd2a66044a6150832b6aafc3e888614e08" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="30.oe2203sp1"/>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-21" date="1692014400">- Type:CVE
- CVE:CVE-2023-29409
- SUG:NA
- DESC:fix CVE-2023-29409</changelog>
  <changelog author="sunchendong &lt;sunchendong@xfusion.com&gt; - 1.17.3-22" date="1692964800">- permit invalid host header for docker</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
</package>
<package pkgid="9976bad30e515744bb810b880890e61436c75bc3e8cdea7f228a83df4fa43e5a" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="32.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-23" date="1695124800">- Type:CVE
- CVE:CVE-2023-39318,CVE-2023-39319
- SUG:NA
- DESC:fix CVE-2023-39318 and CVE-2023-39319</changelog>
  <changelog author="luoyujie &lt;luoyujie5@huawei.com&gt; - 1.17.3-24" date="1697198400">- Type:CVE
- CVE:CVE-2023-39323
- SUG:NA
- DESC:fix CVE-2023-39323</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
</package>
<package pkgid="519d3e6fdb70b9e12a3137797d9c03aea3f3310abeee29196647300b2eae0fe1" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="34.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-25" date="1698062400">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
</package>
<package pkgid="66e16b48e0a2104366ad881079f94589d401117a1eca7cfded2ecca2bd0c5346" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="9c2444acb4e121a92ed3bad8772510b231f0b0f0df7b76f7d761a2bbec465f6f" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="37.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
</package>
<package pkgid="40c7cbb285092eba3cd1da9e3af0a4e8b6518edb7c5e7be56333323364950892" name="gpgme" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="3789b8ab46f2f8e43016fc75e3fd90e12fc54283f8643525135fa9910f656f84" name="gpgme-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="67fcd0ec501e63a62b7afc6f8a6b2bea76759a1a0f2bd287524e3b69e7e26797" name="gpgme-debugsource" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="a7e2173180397bd4315b799f6dfe40eff6d56771dd567d647e45feeb83560538" name="gpgme-devel" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="8065388169394cbeaafaf6c96b03ad39db40c81b84fff612f01683170013ce36" name="gpgme-help" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-2" date="1666094400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the URL of source code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.16.0-3" date="1709726400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add gpgme.pc file</changelog>
</package>
<package pkgid="232c6055ce922ac6ab7671c753f05cc9fe739516c1951bdbaf836d999a4ec0e3" name="graphviz" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="72adf5715bc5b0bbaec01cd6ca0fdc70d76d4628159c5d7a2464c9397a093069" name="graphviz-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="41c116fa0ff0bfee6235fa3b24d313f7994870f7166e85316d49753210f1dac3" name="graphviz-debugsource" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="c7cc85e28e6b34405e032e06ba3fa0eada355afbe71e30ca1b5b625f6161e93e" name="graphviz-devel" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="f2ff75d0d6dcdc7c9ecfddb1d5105fda56c5fae692107d85e3f908f7e8b49975" name="graphviz-docs" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="f412851e8ede09121b4d6f81304a047cd424fe65f53c4ecc84c5963522433f82" name="graphviz-gd" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="358bb8198dd5306b5ced5596448d019b6e35281741b37b5f0bccc8b568786acf" name="graphviz-graphs" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="ac8cba6dc91819f226c2a0b214a36f927896c479a6dae0be75b45de9e105470f" name="graphviz-guile" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="de97cdac01b8e8cb930b0e9510de07a0c91697a2bbf4e5594a85e79218e979d8" name="graphviz-java" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="9f849133715090159f2b54331a52e2054478b790f6ab08facf2a9c6aba226a0b" name="graphviz-lua" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="46f6cbccc155bb04c1be3ce3ac4845d984dd913a00661cb618fdc6c9e5ab55a9" name="graphviz-ocaml" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="fd88d30df59682f371aa577a5f064360e2a6e21d322c1322d0853029416a8abe" name="graphviz-perl" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="389f458663ad51acd345b182ae2991017c9263e8b29e15a4899397af4364c1fa" name="graphviz-python3" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="fcdb106976267e0548134570bddcc9873c52e02503e8f645c9dd74b0601d63c7" name="graphviz-ruby" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="363401e1d3922225710c5200ae0368f3c2534224f94dde8003b35040950edc10" name="graphviz-tcl" arch="aarch64">
  <version epoch="0" ver="2.48.0" rel="5.oe2203sp1"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 2.48.0-3" date="1669032000">- add loongarch support</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 2.48.0-4" date="1689768000">- add sw_64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
</package>
<package pkgid="9d84d1d26842c4190daab2b0fc2a1120ac32cfb50ab6228773b1fb629d1491cb" name="grep" arch="aarch64">
  <version epoch="0" ver="3.7" rel="9.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 3.7-1" date="1638014400">- update version to 3.7</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-2" date="1644321600">- avoid sticky problem with '-f - -f -'</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-3" date="1647604800">- The -s option no longer suppresses "binary file matches" messages</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; -3.7-4" date="1652961600">- Added coloring aliases to fgrep egrep and grep</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-5" date="1672056000">- backport patch from upstream</changelog>
  <changelog author="renchunhui &lt;renchunhui2@huawei.com&gt; - 3.7-6" date="1680523200">- backport patch from upstream</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-7" date="1682337600">- pcre: use UCP in UTF mode</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-8" date="1699272000">- Modify the dependency from pcre to pcre2 and fix bug</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-9" date="1699358400">- rename colorgrep.sh to color_grep.sh</changelog>
</package>
<package pkgid="8a0ff0e10ffa8724c6d22de39d4361ad917ed153516c964f3c5581e6eef7ced1" name="grep-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7" rel="9.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 3.7-1" date="1638014400">- update version to 3.7</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-2" date="1644321600">- avoid sticky problem with '-f - -f -'</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-3" date="1647604800">- The -s option no longer suppresses "binary file matches" messages</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; -3.7-4" date="1652961600">- Added coloring aliases to fgrep egrep and grep</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-5" date="1672056000">- backport patch from upstream</changelog>
  <changelog author="renchunhui &lt;renchunhui2@huawei.com&gt; - 3.7-6" date="1680523200">- backport patch from upstream</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-7" date="1682337600">- pcre: use UCP in UTF mode</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-8" date="1699272000">- Modify the dependency from pcre to pcre2 and fix bug</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-9" date="1699358400">- rename colorgrep.sh to color_grep.sh</changelog>
</package>
<package pkgid="c825dc2426d795a85985e9cdb0d40527c10d39180e48ce693cadd3e8981f2e8e" name="grep-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7" rel="9.oe2203sp1"/>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@huawei.com&gt; - 3.7-1" date="1638014400">- update version to 3.7</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-2" date="1644321600">- avoid sticky problem with '-f - -f -'</changelog>
  <changelog author="yangzhuangzhuang &lt;yangzhuangzhuang1@h-partners.com&gt; - 3.7-3" date="1647604800">- The -s option no longer suppresses "binary file matches" messages</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; -3.7-4" date="1652961600">- Added coloring aliases to fgrep egrep and grep</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-5" date="1672056000">- backport patch from upstream</changelog>
  <changelog author="renchunhui &lt;renchunhui2@huawei.com&gt; - 3.7-6" date="1680523200">- backport patch from upstream</changelog>
  <changelog author="gaoruoshu &lt;gaoruoshu@huawei.com&gt; - 3.7-7" date="1682337600">- pcre: use UCP in UTF mode</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-8" date="1699272000">- Modify the dependency from pcre to pcre2 and fix bug</changelog>
  <changelog author="zhoupengcheng &lt;zhoupengcheng11@huawei.com&gt; - 3.7-9" date="1699358400">- rename colorgrep.sh to color_grep.sh</changelog>
</package>
<package pkgid="c36e1a2ee78f7bb1f774a249faddbdb121c5d7c6adfca87a8a4aefd1e232900f" name="groff" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="0b363948ad53abfef3d3689b1e653cc5652669daafcb383a00e3528c679ecfc9" name="groff-base" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="d2cf827934312e673bb63297ea73d6a1e4ce8f10a1ac4af1bd566c7ac3dab551" name="groff-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="7fd7345fe117e3398b7b01251a9e6970f6628fc8a2658ebe4063d656bfc29b95" name="groff-debugsource" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="5dc5961af55fdd108e6ca4a72201b8d4ce2119e0bb7edbf0310ccad52fb324e7" name="groff-help" arch="noarch">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="b6dfbe378804c70a1d9373476618a1b11054b6012f2126a559f95a6c0375b2a6" name="groff-x11" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="12.oe2203sp1"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.22.4-10" date="1666699200">- rebuild for next release</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.22.4-11" date="1681214400">- fix groff build failed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.22.4-12" date="1712577600">- Avoid reading from invalid memory upon failure to open an input file</changelog>
</package>
<package pkgid="8322d474759a956baa977d74f665e250deca6e4192bc3eb6af53463702afb85c" name="groovy" arch="noarch">
  <version epoch="0" ver="2.4.8" rel="12.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 2.4.8-11" date="1668081600">- Change source</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.4.8-12" date="1708430400">- Compatible adapter for version 1.8</changelog>
</package>
<package pkgid="4db6b68e2fedd0286e18a5f0a5a01d3f708581b5d5163fe73d998d0d0a91cd99" name="groovy18" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="3.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.8.9-2" date="1708430400">- Replace run with exec</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.8.9-3" date="1708948800">- fix help information is consistent due to the singularity of the class method.</changelog>
</package>
<package pkgid="828bba7778581c4e44804469fccb9793c9e2f4cadc646ad93d1e49769605020a" name="groovy18-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="3.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.8.9-2" date="1708430400">- Replace run with exec</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.8.9-3" date="1708948800">- fix help information is consistent due to the singularity of the class method.</changelog>
</package>
<package pkgid="43f44f0007171e385763f86616c5aa7cd73e737fb2a1bf5aff30c35b14f989a0" name="groovy18-lib" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="3.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.8.9-2" date="1708430400">- Replace run with exec</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.8.9-3" date="1708948800">- fix help information is consistent due to the singularity of the class method.</changelog>
</package>
<package pkgid="1a1c991d1632f631a6ebd5a69045523e9de470fa9f72b84886c4547d801e3d1f" name="grpc" arch="aarch64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="8e47395dce47f2d78ec75b14da53a773ab8a19ccda6a96e57af9ceffdb5f1a0b" name="grpc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="0d22979a6fb5d7a6532c8f7e11964782951f54946c118461dcbe4553d8da9610" name="grpc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="3d112b16a50532c4ea789293e5dafa1c74dc57e24c7844367bc206c089eef97a" name="grpc-devel" arch="aarch64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="c4bf09b22cad5a6ad0e8c7c3ec9114497834831ee48936822873f04dfdfc459c" name="grpc-plugins" arch="aarch64">
  <version epoch="0" ver="1.41.1" rel="6.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 1.41.1-1" date="1640606400">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update grpc to 1.41.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.41.1-2" date="1647950400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete useless so files</changelog>
  <changelog author="xingwei&lt;xingwei14@h-partners.com&gt; - 1.41.1-3" date="1650110400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC: remove gflags</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-4" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add some secure compilation options</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.41.1-5" date="1684497600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix sw_64 build error for hive</changelog>
  <changelog author="zhouyihang&lt;zhouyihang3@h-partners.com&gt; - 1.41.1-6" date="1695124800">- Type:CVE
- ID:CVE-2023-4785
- SUG:NA
- DESC:fix CVE-2023-4785</changelog>
</package>
<package pkgid="fa8e590dd907762cec96d1633ebd1757baf7ce53b428be94a1a409d75e7018cb" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="debe917a5d4ca4e073446e87d6e45b45c8f16ccd41f8a78c9e45f8be00385ecc" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="9f1e50a1a56a0c319b3a94fcd0dc5914542dbd145fd5abd2d60a0482199df409" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="9e11966f3ae0f4659820ea3ad68f2a957c8a08bbd6c3c18e6977adce1b52e769" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="36af75064ff2fd8e74bb21cb5dd034c353e91ac4f6c4c43f33bb59c1048d0d2e" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="dba4901f8fce07992ca2f4cad41cc573d4e88f786c18e58bdf51ccfcb7226400" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="6c2cf31f9ea751082d0d7288c3d6e1963efb0e9722abc8fd2f2dc9a49358d60c" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="6dffd0070042e134e2427cfbe3cd43b417ddf958960878622a8411fa26916408" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="dc5210d07e96dd66497e6bf06074ad1dfd9022a8a7f065c97347269c3fdaff10" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="4ad0a43043d6087dfc5567f79e2e38737d59d78a92d5ab1523608827c2fd0222" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="b18ae896d516c679685f679c569b4c7d2b72b9a462de03c197500f4798457426" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="c0c4d54e1d62ab316b2d09ccb7b468128ed5bee788299f06f0c0fe01f37773aa" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="9da6250efdb4dcb72effff7877d9e675fa2c065c959e06ca6479b7d2a30ddf65" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="f4e98a575ff021837dd720cb927ccec78cd765a6cdf910e107e6d402db4bafce" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="dd6b3fdcd5a2f4da370e4e8408ae545a1e38c7a685f97ea2dc7cfd3e099beddb" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="9a0b57d8746968a5a6b17aad2687ac6fbec49e6d94c7742af043af37b83af167" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="efc16c372249230afdca56a0265421e055572028f90467e8baa459fafab7a912" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="a680129adfd16d5ad0008dee03c577918f9f854acb32071fbaa49babc7589b71" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="3e2b5e48a98db744159a3d5f371ecc4f235d445a7d1adf1856fa98b598198f38" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="c543901ddd69dd2f4c4bb61d92b7a5fc0cf78a11495aeacbec9a4cd72bf9e8b3" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="1d0fcf961af74c6dceb7c25df173e3cc5b99071ff13fe41d0fd1c03c9bf8e4a5" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="2131dd4c89950066696c28c91aba4797730942ddb3d5437b94fc0e2b630d20b7" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="4cd86ce1b094c2c93d333e288d84ece9a1c09129b6760607a649d76a2dc347c5" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="c780a467bbc9fbb37ad923fc9eec3eef73967d1ae3fbde67f8cb9df0528963bc" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="e20c8e833cf8e2ce9b2a9739dd53e0f79be1e8811f60cc12f1ff5987d2f1bdb4" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="ed53e39d9a8c7acececa23abde12f1b6714ba5e584dff6cb6169bcbe98178ce9" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="390e6b931a5479ea340e7a6378265b532dc5cda131be0b452e62d8f0302d6875" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="bc86d9f99a2b20c206063237633a8811c801ca7335e2f11cd736f4f77652b76f" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="0418189a6d0797cddf0930cbb44389591b318f699cd1b3428d9ac27c3fa6ab00" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="49af9fdcb86b61a2f832d876b45acaaccb4f58d4bd24a1762078b8bb3c388198" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="88208377ce400b6ae06c14af1871e8b48b913ac77b2b96e2e667a22914166a4c" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="725c4909034287f2f571c268ee92d7cd7071153180f50d383ac154cc6ab80b4f" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="1df7b4b1e6658904164a717b4c310fd18aa24d637af5c3df337b9b850363b97e" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="1a2646e57564309f75a590e9d8c6a2b613f9c122ce8cc49015f22d84a2061c83" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="181a81d33c32507a76e782ea9d936f8348a072310a0522922dd59d7b827c1f3a" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="ac854426ab20a9cd0ed0ea61834147919122e64c368142ddfa7bab84bd35598f" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="0227a47fe61cfc01f8a14a0fd90080abbef29883302cbfe34d044668dd3bb603" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="33cb2c00c6b3146d5753fd64b4431555b9ce967cc746be1c2111c88574657315" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="248fb5857faef678dae50afc2f71b823fd5ae2fd1724f3820a14db83295a536b" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="2cc8edcd91c707648d4e1a8e1cb01c7ed7637fcd91c421e42e10894ec6a06f72" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="c5640de77a0f622b8d777dd959e60c5ce53e1fe1f297365784682cc9d60cdfb2" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="7eca4037518dbbf1b3fd76e3f6f67dcd6137ea6a012684cd9c7faa347335a062" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="c6481626cf13de9e753daf08f115dc150dedcfc9e3d1cee1c8522b48590d13c6" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="511792120b755848e3ca3c0848e8588a3046b3b46b6cef1ebfb1a06490779dca" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="d06eda3802ff818ab2754461c322f616e5aaa2ff5493829051ca22424eb3abac" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="f80487891dff13f46cd2c2308898de7cfcfd99a69985393956762037dc560950" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="caceda7f61dff4015c6872d29bed6b58a52456e8ed2f69af9db1b27ca5846177" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="b36cc7679bcedeb4c5bc19c891f7a32a4986a997ff5254c25d979ab4bdbd6343" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="f409fe173c63a0b54bb6862c5472fbf05fa4c2c590650614b8003653fd82014b" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="a9984fdaed768618fdb2eada69505510bd9467fbf1d8611c6791c11ff52d7335" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="9f54e89d04a9df38002f2cb6b345e46b6528cbffc54b1e8d75447e02179760fe" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="989feb89e1b3db86d8ecc59245468ca7ab6fd63b4fab0838bbf80a195a9a7b31" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="b913c19a3d497f6454514625917c385d3cf36ddc2aa6d2d14887a24b3783eede" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="e53539afd77a22d61d88f978464448a4ea6016cc1248aafe942c63e695b63465" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="7e8b341efc2af694eec699d3d40c699dd8e93cd05ba98882bc98f939bbb86870" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="dc98f43445c7b15f29d30752bb9645509aa5e76b0ba85e74e7477ec54f9f322b" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="8b1d7848209e16499b2577d9f19f19f3b1aad54cd3a895b1e12412d89f2c7f69" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="e5fe76ddf26a352dc232d99e682034d7395d29687435c8e234ac94956817ebad" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="69efe510d3d2c638f983204b264ebabebd01d060310e81e0ffc34c8700423e3e" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="1fef0956de30d97fabfcdccf57c7b1626dc03d8f9c90f18386b5b97318416e9a" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="639298244c82ef58dc93bf642fb1a9cf06e963eb788fca5bf1b0696dd02bee57" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="afd8939683949bee527a481c338c3a0fae0ac4601e0741e1c7c66b6ab904f1b4" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="39c80932e1351bae9031ac914964da02d23142fff0e455600108d2c618c78082" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="0165c3594019bfc9b2e7430d6fc663bfa75a9c4dd812964feb1f32e327adf086" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="f5a137c914dc3371ac9809f682dd84d3796f960953d459bd4a38443b4e338c26" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="1eea76c7f67bcf9f41c8a13e8f4fc265c405e421a21ce37b4ec2b07895c5864a" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="b60b0afd4bf293a0fd7d1359dfb3970dd3a1bfaa2d5be06f07f44d3bbada3ba3" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="b38c30a2c206f5a58f7a1e993fd3669003c2d6691d13ef161594703792b3c902" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="2fe53737589e5d6e8f0a10848d0d3917abf450190974bb21a527a251724b1f79" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="46ff3d41fd1ca37444fc38aa50edf7166a76fa67c321abc74284c8c58f7517af" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="01088291607fc0353992c1e6d790a678a22065557cbc2e04de49713cd87cbedb" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="f1fd472d89541501fc69ce5c3646205c9e8b53e64ee2a37e477a2765092ca616" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="681824098aec352f02e529b6ef5e72fdef6725bfd3b96a742e6e39b14fc93d5b" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="1f1cf367c1ac96d6d6d623103e482eb74ff6a47bba6536db64d50d62adec26a0" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="5240dabbac5ba21bb912a633e1065a9c70dcefd29bfec3d31c5b3aeeda2cfa4d" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="de74452fdcbe9b9f4d687a81aee0deb1823e2ecad14dc59a4621ad25366c0777" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="19017d762fe600ae208f62ea34172068a44832856010ba52571498b0c847d16d" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="c4ed0810c04043a94c966ac93aa251f4ababb19d028f6f32cd1e6f71536b1988" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="8f4b2509144e58426e07e749e9d071a60d15e45f7163fb2d36028497d1b885ef" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="9b0be27e0112a25b9cadc3c45aff5f0eb39f5c16ca6a22d1b7c036d6e7e27b98" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="996fe1b908ddefb2de7056a1aa804ee9840f7ef483dd14554ccd104ceb01ec00" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="30d53b6e23c79f0c5dcb8d4d50674c69fb429c4450b70339f0a07e11e4e510af" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="971cbbd42f074942b6f598e5ff2e8ea8b220cb311e68f4db31c3a6545e576404" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="51c562d9e78062cd57df06ef5196e16c657e06687e641ec0a1357b93deae9d75" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="8b8971bf6e421052d2a52649032e3ccdcb069a7d8abe64f3b18806066da59168" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="d126e609965f2ec5cb781b89ace655dd24e6bdc9825cf99bde263ae26fe86171" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="c484784d0f3322d1ebce44c696a885409174cec576b3180b4db9b31b0092bebc" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="5508d0ce0ddecef7b47362669fdaedb36d5c7230dbb22434f33d36db000930b8" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="7040fc5394a3cedd625bf327b7d201780240bdc0ff0a7d5464495f5ce9426608" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="617f1cc9381a99939a89f67c07c333bd0f80cc9515f44c8d51a4bf1ed4edf99c" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="0f85e81edbf111054400ac61653323b66c0e052c6ec0abe80a47b1b58a96d9ea" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="795b70bb4279920341b6eee203d86558ff04e05f9855b1352ae98f6fa16f5da7" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="946c0f1b6454d7ddc86d0239c0887ef7c8e11f50df75c929e1d9757ffe8579a9" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="464f8040195df3632121cde3d5a16e7fc1cc8184db9113eda9180fbf6fd1853a" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="20b095688c7924e922d767adbcdca057c7ef35de0922965aa3a12c4f80b983d7" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="fe8a776dd867cb19a47183d0f0beddf09694f79cd480c7949bab49ad20348918" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="4c622878f17f490f01533c8e7fa6a1d5ab0852cd99cc31b77c602eb83eb7c7cd" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="45bca04bf94a17753f235789adf36f279e33eb1d9ce1625305499f477d7a2af3" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="ab02ae0e46a1b528ad3b7f2a9fdeb623d277c26d7fb4cb45d0764d791f70a912" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="5d4b47c7783afcded8d03b61b24428fb7c43d9691d9a5fd429d1751fe3286f00" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="e3d866a0de955170359ea6997688262f91472d99a0e442b6e996957c120d7651" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="8b6947335cc8b58882132837c7869b1670de1451fa8d50e6c261b1543857802b" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="1eefa0b0b27d49a5543a17b0d5e35d3c18390958e9a65d2bbf35a5c0420daca5" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="ab446369b020b07080b46e8e682fdba6b01591e97ff5a77ba41f68a4a9d9aea9" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="161c7eea2758932acdccb933f59246f4479ab44124ac09ec3b0d1711ead9cb74" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="0e545b4821dc92d552eb77aabd71a98b81c351ec0c1ce0de2f202f16e082d23d" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="5533b5cb70d983438fb3de3f0063dcb516e92fde1c8c4ba4d5905f7cb31cc16a" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="6b07d9dd8beb7f301d6f41158befe67d34b490cd92c1c2acf1812800627d0c76" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="7936aa08e1255678821660a51ce10e3a73c8b641e2560929f8b6050eee3ad784" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="20.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-11" date="1658577600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed</changelog>
  <changelog author="wanglu &lt;wanglu210@huawei.com&gt; - 1:2.06-12" date="1661860800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-13" date="1666526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-14" date="1667563200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-15" date="1668772800">- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-16" date="1670846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-17" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-18" date="1673352000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
</package>
<package pkgid="66ae21df211dc5c35b08c4c290e0e56c4a5912ec14e6109eb49f00d630dd2b32" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="28.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-19" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-20" date="1675339201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-21" date="1675684800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
</package>
<package pkgid="ee76f2b9a9134e7bd6ea82449343781343f74daa3c1783ccf1bd2d17d6ecf4bc" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="31.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-22" date="1675857600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-23" date="1676289600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
</package>
<package pkgid="97724ec5ed6bf09fe4a83bad238130211c34c84611db17f07716d01758427afc" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="33.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-24" date="1678449600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-25" date="1678536000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
</package>
<package pkgid="446ed5332f8e7d630a584c52aea4d10df4cd0c19e4843ebcb565990933ad83be" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="35.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-26" date="1679140800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-27" date="1679486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
</package>
<package pkgid="926d5190e8b737df56a9134dadfce719d20b1801a7dab4a144742cbbf4b33b69" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="37.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-28" date="1681128000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
</package>
<package pkgid="b5a6f3b5e5d7736a69cfecf7b8ed6e3dbc63418385b066a6bd38f7ad1015249a" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="38.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-29" date="1682251200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-30" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
</package>
<package pkgid="0a371a42290dc5519facde093a5ec1122307f477a7da87b49d08d36f8879dbfe" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="40.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-31" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
</package>
<package pkgid="2b97043a2ecb17c59448d09e2dded88a9b1b7f2a1a54615f458d28c5e3f92fe5" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="41.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-32" date="1689595200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
</package>
<package pkgid="efb76c6ec2360b1c5033c3711ae713422f13bea9b4d380b2791e69e2b70b6df2" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="42.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-33" date="1690200000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
</package>
<package pkgid="39a1c480efc23e7f82b249806560fb1a5c2734b7f86300ec951e45d46cf45f1b" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="43.oe2203sp1"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.com&gt; - 1:2.06-34" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
</package>
<package pkgid="1054fc28d67a858b0986ca7ba0ab3c3551dd21b4e09ebcc1512f015476558cf3" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="44.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-35" date="1692273600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server</changelog>
  <changelog author="ouuleilei &lt;wangliu@iscas.ac.cn&gt; - 1:2.06-36" date="1693569600">add a patch to fix build error</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-37" date="1694606400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo-&gt;freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-38" date="1696680000">- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-39" date="1701777600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-40" date="1705060800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
       change the name of module tpcm to tpcm_kunpeng
       skip verification when not loading grub.cfg</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1709294400">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-43" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
</package>
<package pkgid="7a33036bc6b221a94bc784835a3faa866b3e1bf5c90358c31684fad52d8b5c66" name="gsl" arch="aarch64">
  <version epoch="0" ver="2.4" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-10" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="c208d0340dfd025a6e6822c05a3348ffdbe4df49a362542c3190407a37ab1faa" name="gsl-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-10" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="70b5ed48a47f919e017a3e762f0f9bf2ff6100b1960cfbcc18af732c42d344d2" name="gsl-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-10" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="db27d612ef8c1b42b09a83a8f98ba18dad7453aef7affa3f643bb5dcf5f0a8e5" name="gsl-devel" arch="aarch64">
  <version epoch="0" ver="2.4" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-10" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="399d2bda8db7ea458e9e3cd41d4f0fa5cc92799733cba061ff2735c7416019f9" name="gsl-help" arch="noarch">
  <version epoch="0" ver="2.4" rel="10.oe2203sp1"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-10" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="c7ba923fbb1d9927a7d38d84ef121ab483734805dce9d91f63aef9aa37738b67" name="gssproxy" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="4eaaf4a9a79fdfc1993ad6dcd21bf9771644f94ca9a181c9f47ee3514aa563d3" name="gssproxy" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="c7616a1b839bf07f688b7cd5e4d0840a76e45eebad5a0c824cb7af1fe16c22af" name="gssproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="9f8de30d096d69ac52fc6b4868f58f4c89a7f56c6a301b13ac6c6cfefe4547ff" name="gssproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="56b9d47dd4977bf4ecf1907d4e068d19742f99395da01c4f6c7135383a8267e4" name="gssproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="fb32c2a35a415be04b09b078d7c39905badcbd4c37f16aa515f922ab611d93e9" name="gssproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="c597d9fb8ce7fcf42ca294c3c53d2ec7c9ab25aa95b56c0607f2e1f36b71241d" name="gssproxy-help" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="2.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-1" date="1638273600">- update to 0.8.4</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
</package>
<package pkgid="ba73c7496d4a8482ed430ca8612cfd2d91318f7efb9e94dde76fb686c44718d8" name="gssproxy-help" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="3.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.8.4-2" date="1666094400">- typo doc fix</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-1" date="1666612800">- update to 0.9.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-2" date="1681128000">- add BuildRequires:systemd-devel for option idle-timeout</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.9.1-3" date="1711540800">- backport upstream patch to remove node from correct list</changelog>
</package>
<package pkgid="4370a961605eb49835d43a885d3633266e5516b058a16f205724464c30f79a15" name="gstreamer1-plugins-bad-free" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="4a1d419bfb0ab43a8035f39d56df9000a66a427fd23e5b8451b1c539536e2ecf" name="gstreamer1-plugins-bad-free" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="c398e693e75fedd552327464af8a6801c6e493a9fe6446da7a4a9edefed4f82c" name="gstreamer1-plugins-bad-free-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="e00c3778df4f039b7350967304b5e7c63eee1df483843028ec8c786ce54bfc80" name="gstreamer1-plugins-bad-free-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="29c1b1be39cc4e741232f9e014844f3db24a39ab0076708d0acb2df46094a1ea" name="gstreamer1-plugins-bad-free-debugsource" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="c06f97f250d8fad20cc1b317c4f0a07cff071c6bb5af902481d3da6fee4166ee" name="gstreamer1-plugins-bad-free-debugsource" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="68eeb97c4578c7e72ddbdec142ece75952dfaeca8b5f23c562f14e58d20141c0" name="gstreamer1-plugins-bad-free-devel" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-6" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
</package>
<package pkgid="b2fdbed3ba96d06f16aecc4dab837422519bda1235cc48e75e3c18f489617f97" name="gstreamer1-plugins-bad-free-devel" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="9.oe2203sp1"/>
  <changelog author="pei-jiankang&lt;peijiankang@kylinos.com&gt; - 1.16.2-5" date="1642161600">- modify complie error</changelog>
  <changelog author="houyingchao &lt;houiyngchao@h-partners.com&gt; - 1.16.2-6" date="1655208000">- Fix compilation failed</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1696680000">- Fix CVE-2023-40474,CVE-2023-40475 and CVE-2023-40476</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 1.16.2-8" date="1702123200">- modify compilation failed about libgstwaylandsink.so</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-9" date="1702641600">- Fix CVE-2023-44446,CVE-2023-37329</changelog>
</package>
<package pkgid="ed034fb089b813a1782062e78e2d62ddee6e09159bbcf220da43d1450d29de1b" name="gstreamer1-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="e1db3bab044e0e78802456744b9d821f8257a575857d667410ae8e00c303f2ad" name="gstreamer1-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="c1b072d40af784a0c4cebbeb74e36dbc2f7a48671a714e7ec090e26b6e2be6f3" name="gstreamer1-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="141cfc924d38bc90d845af6844a7b34b1ba3e9975f55962e5d47f1a6fbac2cd8" name="gstreamer1-plugins-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="846bb10a53feaabd23adfce098456ec3c7c0f1ead5537ae49c2b4f6e64b2d5da" name="gstreamer1-plugins-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="7ae91e3e1889f7617829055c02a32d3b6d0a17dc5403d826b814cba309511a43" name="gstreamer1-plugins-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="c41f596031752a90a97326f81bdf5df0ec2bb98d71fd1a4e557b8c39c2e16115" name="gstreamer1-plugins-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="c4687b448326dbadb67ddbabacd4aea74fa7a5d6b499c7aa4d0a622ce3315321" name="gstreamer1-plugins-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="d78368dddf3a93d82572582a9d2126c1911ce26e14121ff614ab9f07887bb279" name="gstreamer1-plugins-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="4027a4803a6abf5937484cdfb6934d6099f05e95b9b05e2ae1b528f72c7a4dd7" name="gstreamer1-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="f5870d6c8af85ed840dcb45c48fa63bd1ad3d2aa6be9b6c456e686c46bf4c6d5" name="gstreamer1-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="6c4b536d1df3bb59f01a0d09cab447bd00c1e68873b7fae32082aa79236ceda5" name="gstreamer1-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="0e9b89733d5ad6ecfca0e64b1f01fc40b3c17713f4cee00bfa9179d3bad8cc90" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
</package>
<package pkgid="21d4086c5a4e3196bb3933d476f05506d4c5cf37f8696ad567cb50aa23e10433" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="6.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
</package>
<package pkgid="c27bb9b3f05fb5e35e46fdb571a52d953f44dfedf90d716b146c36e7725d5a01" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="7.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
</package>
<package pkgid="40a40d7fe37beb33f9d20ae95c0c7ba5401c65c9d8f1aa5451d97088af55dbaf" name="gstreamer1-plugins-good" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="b12dd2a65d1f910642bc8043ecb76e4f0534192659a57e831ef1130e11802214" name="gstreamer1-plugins-good-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="49798de6d61b31a7365671e34253e6769b4ac0d9a12f2436689e79c5cfed2b6a" name="gstreamer1-plugins-good-debugsource" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="83bd1d481d84c7dab49e81eb00dc9a27337d81a28ddfe90f4b38bbf2ea75ea80" name="gstreamer1-plugins-good-gtk" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="abdca99caee2391c98b2d105bcb5c91074dd0b277ff17e5677618eb98aabd4e0" name="gstreamer1-plugins-good-help" arch="noarch">
  <version epoch="0" ver="1.16.2" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.16.2-5" date="1656331200">- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
</package>
<package pkgid="5d96a3f666ae1cb2e3a85a3e108082854cd7fe8af04c8e889a3d4d4f9ab8be0b" name="gtest" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp1"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="2d6c3218b18f624893c45fe61a9abd8305ed6c519d259e78cec63e0c8bec2848" name="gtest-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp1"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="773bc1f192056ede6efecf19530f126f8e02953cf97cbf3c68bcced4356683f7" name="gtest-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp1"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="0a4ea50297cc41950efff7e29f1c4c5a1c19c0b6e4c9c9f3a952eb2d4c0fc529" name="gtest-devel" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp1"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="a377168fe06c1a016c36a1af93768b793654933d1cb800ab18308aa524fa4829" name="gtk-update-icon-cache" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="99e6c7afdd5133426790338a8d9296193c3fa9ba488c6d943422cd18288a962e" name="gtk2" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="4e4d0bc73268ba1c2d3007a536e94e7a91a3dcf37d67194f4e3120a42d971484" name="gtk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="e40c8019f3b50d2c871a839d85e4e6019656301d4bc124c646ed209c4ee15c7a" name="gtk2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="3400d5c615cf9095275da618253118a0df81dea95a1f2d282ab671bd3a89e2c0" name="gtk2-devel" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="a1eb5be20c72e44661ae05a28738563bfa7d47d7fc30d2d074b125baab3e6af2" name="gtk2-help" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="8f7ef4c6fad08701b76399a5a38916be639755539a6e9c39ecaff7fc0cfaaa63" name="gtk2-immodule-xim" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp1"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="3a8eecfa6ffd3c2189733b16dea35e43290d466a6adc7f2c6f72c49846421e39" name="gtk3" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="9c7568dce68f721fd1d0c5b9a44ddab35aecff300098e4c089690a6c5b18eaa0" name="gtk3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="f06a8b17cb327437b8b850a930f0f480d2381929b9d9ab92e00bb036137fb61e" name="gtk3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="585a7e2f4421c90c63053421ee9641c5976f0aeb6cdd85762a319c22c1cfd466" name="gtk3-devel" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="d0659d3dc9a0e35987afc2116349495338b4703887ce3f194fef4548fb1938bd" name="gtk3-help" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="f8fa156d31233146ba927fbf4c716f81108961626c673386c213ae758b0e5a9b" name="gtk3-immodule-xim" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="9896057641cff0e96fb4978679cb206bcc9700b12d11f098aa058c87b5a901d9" name="guava" arch="noarch">
  <version epoch="0" ver="25.0" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 25.0-6" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="5c3ac1e92e1c03c02137b8e2435092c4d1b67ba4a0b21443abdcd1339041d6fb" name="guava-help" arch="noarch">
  <version epoch="0" ver="25.0" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 25.0-6" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="758e3c6b37dd0ce6d415ce223d4900644c20c6e7ec9fc729354f86eb08c7cd4a" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="25.0" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 25.0-6" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="5dd8026fae0b6e9dc4ca9d2892b02659cdae6214452aebf25ff2c79f6c6b95e4" name="guava20" arch="noarch">
  <version epoch="0" ver="20.0" rel="11.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20.0-11" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="e48bea0c540bf1772090c2ad8793fb6c14afc53517aa6ff1f0b7639efc540b96" name="guava20-help" arch="noarch">
  <version epoch="0" ver="20.0" rel="11.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20.0-11" date="1688472000">- Fix CVE-2023-2976</changelog>
</package>
<package pkgid="057269e64c4929a1025c4dd6dd8b5264fcab9b37b535a62cc2273a9b309cc109" name="hadoop-3.1-client" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="cd1e1a03f36b7d3c7749d8500ce73776cba5350e51569280b4078e9b9e6b47e0" name="hadoop-3.1-common" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="86e405e4c75af69cb134fd505d478b3e2f45eac3775c4ec9749fb986effb6659" name="hadoop-3.1-common-native" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="a5299ec5112c0a3e5978e123c5b3771cdd6f3377d36c5e8efcbc28ecf646e367" name="hadoop-3.1-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="150bdf0c0dbae055e47b9bd4e5aab7fd9c2438fe04b5690ece6f4fdabd174530" name="hadoop-3.1-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="3306e20227007bde5130484fa6264523bafdd50aa91eff74e9efb842e2b66393" name="hadoop-3.1-devel" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="017a787cade1df0d079b595cc610b66e439e79467e8d53e71e16b4d0b255c412" name="hadoop-3.1-hdfs" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="14125289c07bf469a2e35dadad5807a04fdb4c69f6d465347a17f90de1a3da34" name="hadoop-3.1-httpfs" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="e232ccf7316f701fd99a5ae4889157e5a45d4d9110d645ff7cbcb94741a9001e" name="hadoop-3.1-mapreduce" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="7471404c4bcb4dbdcbc84a1e55a7b3e8b5cb03b27c09ac2d2687b74338bec4ae" name="hadoop-3.1-mapreduce-examples" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="ccb953980b7dfd0172d6cf3f3126f54836a9a031dc77e32a927e86b5bb450ad6" name="hadoop-3.1-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="a913867220ba94255608ad3e4c91bdd6b956c3e8e8c988fe9ac09afef28d3d1d" name="hadoop-3.1-tests" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="6454c5ff8f051d45b88ae42192a8af28e8c4a3fe4261d96a915e6e05c6b5bd3a" name="hadoop-3.1-yarn" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="65197367bc8d36d4819117206dd4c918697a666d9e317aefb060135595d23335" name="hadoop-3.1-yarn-security" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="5c59ea48f6daead542e016169cb818bf6cb2fd7a503b9fe0b733733507cd6961" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="2d1fc32cdc91d027fb2b3ccc77088ff9802f640e11dc60bf5d4f65623faa3a16" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="5eda57aa3aa819a422cfd8d2f9b82f68f58f21af8a06f602157a1a9dc866b521" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="64395afbe6958c3a284ed6cd40b3887205c81ba29f56a080b7747f86b08eb341" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="07dcdb66886238a69a1137016c7766b62bf894417091caca3bdf1cba5a8c9c1e" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="f69b49283e8d136cea69f5e7754ac96285fb99d5d88b8aedebef0b6ee9b60386" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="056e3db5c34025b6c82f44cc63e83a83bb75202f6d992ff3a6800d34642d179f" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="1fd1aca61785b1400ccb041d341f4f212195c4234272a7c0b95467cbb5ae3bf1" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="5dc2ebf49d900e7a3bed8b6f6363e99d6033829240c467b0cd349caa65aa7258" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="290a8ce441e131debff452de40d71517956af6581c54f0acd0c74e20123e4ef5" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="b61016fbe8d32842291935ea5295fa6f986e60d269da2fe3f8f0f4a8612113a2" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="9217b7a56fe7c160d37732f7e252e49834ec92939f8c70310688c356a69218d9" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="cc39214da16019a24949883e0df3c2838198199d6b8598a30721973284cb1043" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="ce72e059ba4c8288d51eaa2791f2c69b998b19efa01c1e80fd630100e2989411" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="6276edff34b4ecf928695a26239b4dbada668044a47117a33169a9c3917c9bb8" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="56eb4a8f044d6a6c664ecf8c9810bb31871b88a33bb18e7cefb0f688a8a8281a" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="73cf81d5d9319a405de43178845ec6bb6307aac3dceb69698753979960a2a07b" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="86b31d78865eab09d25b5b72e3086ffef268c1b0a84f0eae68edfb349d62ba59" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="f88770eb5d55c096e768b4c0265d09b25f5b157c42da49de3a57ccc9cea07c01" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="f3ad7f68afdaa90441950e3515ec50329621ba95ef51a141046afea4ef942046" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="2.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
</package>
<package pkgid="e34687c645867c7c769e15e9df9690557fd376fcb6b0ba05227ef816c5cd69f5" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="3.oe2203sp1"/>
  <changelog author="huanghaitao &lt;huanghaitao8@huawei.com&gt; - 2.2.1-1" date="1625140800">- update to 2.2.1</changelog>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
</package>
<package pkgid="a0edbb16e97f9b3b9f43ccdfa3dfa429f9ade81a35d01160a5ba457c07668835" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="4.oe2203sp1"/>
  <changelog author="liwu &lt;liwu13@huawei.com&gt; - 2.2.1-2" date="1629979200">- fix CVE-2021-39241,CVE-2021-39242</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-1" date="1630324800">- Upgrade 2.2.16 to fix CVE-2021-39240</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.2.16-2" date="1631966400">- Fix CVE-2021-40346</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
</package>
<package pkgid="0416f1b990a3260ffc15869b2656df0f0be78c2248640533f522ccaa7ed89977" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="8.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.8-1" date="1638878400">- update haproxy to 2.4.8</changelog>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
</package>
<package pkgid="4870d5bf42517bc0b56738fa28eb6bb632ed53b75a95fb8bf0da6332aaec7e52" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="9.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.4.8-2" date="1647000000">- Fix CVE-2022-0711</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-1" date="1666440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to 2.6.6</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
</package>
<package pkgid="3391c180d2af38ff8cffb346bfaaff3c9e465155f38202f6f7a91d9955c6e7cf" name="harfbuzz" arch="aarch64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="481c2cbec1ccc4e155f469468c29d6cf3595e9aaa643706329856b1ba32d11b8" name="harfbuzz-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="25c93b582864afcb5e1bedf0deb9ab0e7b5f259327ca5e9abd4a9918b2e5acf6" name="harfbuzz-debugsource" arch="aarch64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="e409ae6fcef9c393dc74391d7316518d76fc2ef416caa828079237e1a4f3cbe5" name="harfbuzz-devel" arch="aarch64">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="5e53f85dd40e07fd0d742f075245a72e855db5409b4db8559932059ea05f70fc" name="harfbuzz-help" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="4.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-1" date="1624622400">- update to 2.8.1</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 2.8.1-2" date="1625486400">- enable make check</changelog>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 2.8.2-1" date="1638532800">- update to harfbuzz-2.8.2-1</changelog>
  <changelog author="loong_C &lt;loong_c@yeah.net&gt; - 2.8.2-2" date="1653393600">- fix spec changelog date</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-3" date="1657800000">- fix CVE-2022-33068</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.8.2-4" date="1676462400">- fix CVE-2023-25193</changelog>
</package>
<package pkgid="4068c8c1f3e8aeba85605367fb63ca5946598a62c5e1890d980f1898c79f3d53" name="hdf5" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="df65dec44122e98aade4499b237708a57551e5fd239039a91ad39683da4fccc5" name="hdf5" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="2691e6f17b8572d79f7d0d3965ff9a9d93a2fe3da2bf563328a64e1e59a01abb" name="hdf5" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="71ba48defafa6e6d63cc517a731b13ddb1f11d5fbc9924c717df6be42922ef19" name="hdf5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="8bbeed913f09f9cef98d13b26a0a24823f05a454fe748f3de50565a39bfe73ee" name="hdf5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="025625e3a97ad5c19ed4915b9958dc5373600f791b40abb798c49f8b6ab3ec3e" name="hdf5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="71dbc420ce7fc58eaef7fd239d297389ba54429b364aa402b2dfc903d942345e" name="hdf5-debugsource" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="72c0602782a610823d47d91e2aa631eb43afb6011a0ede2413dc4da7e6f4b84f" name="hdf5-debugsource" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="cd549813956a9b69dc5c5eb614212f98f2e9d7e6672f7a6793effae423910c0d" name="hdf5-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="4a046fa3afcc2c699404e9d188594d73353057efaebbbd31910eea89e4e334ac" name="hdf5-devel" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="b0a6039c7ab7423cf8b1edbeaae28c33f2de9a23f1d57f266ffc609a8bdc0827" name="hdf5-devel" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="dcb1f4fe5d57602e37ebc6f7fc7c7671e91cd18a4afb0603eeefe1301b0b9430" name="hdf5-devel" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="370cb534ff238b5d92bba1049d6ade5f984111dc6acb08b1cdaf26c6887f144a" name="hdf5-mpich" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="6459bd80c6df3d05fbc0bde03e4c4708e296b1cd64cdfbf31379fff4ca6c7dee" name="hdf5-mpich" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="ea2ddb7606ddaa634587ced03816d9d55c21da411c4ac83f9e3171e9c47e9287" name="hdf5-mpich" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="1c77aa0866a758b86aeaf9b30768ccbc7a03682378eee3cd43b62ce244eac14f" name="hdf5-mpich-devel" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="e3cee59967dc1444f270d4b7a54dceba8c38e910d39c6b3b18c37026280301c7" name="hdf5-mpich-devel" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="94dce15c74756cc62c2e696d43088884729787f56bf2e7376d4e200862a7b2a0" name="hdf5-mpich-devel" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="abfc5d9827963d138228f16f081bd766447628fb166ffd362849328d56801854" name="hdf5-mpich-static" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="cba7f50fee36063f2a3bd2f79d3959881bb88f89e7974296ddaa401e15615147" name="hdf5-mpich-static" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="ea7763e5c9cefe893c911cde8e1c38e4724f0d5fd4f6c4942aa775b2b2452064" name="hdf5-mpich-static" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="f975842b1300d2e205e5ca9caca09527ae378249a44637721dc5742df8bef466" name="hdf5-openmpi" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="23c2b90ffdd958b4ee4f6a5ed1ee54bf694e7b5dd3c0561693c9c961b35eca48" name="hdf5-openmpi" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="3bec70b5ca1bb6d5d367838ff585da4e07254a814d9fdf7bf7033135f4b70704" name="hdf5-openmpi" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="0f37b6866c6b98192f3d9ebf3dbcdb462ba1704065392d08bd09472650127961" name="hdf5-openmpi-devel" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="ac13175029b0550f7c0ff1079e71d934261febd4eabea2c66da91eec058ca589" name="hdf5-openmpi-devel" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="5005183770868b4933cacbcea82c803d01c00f9b41a263b6ef66d00274792f3c" name="hdf5-openmpi-devel" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="3cfdc0e73812d0940e1ff12c1f39fd21d2c9b18524a3f3cc610827993f4ee549" name="hdf5-openmpi-static" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="4.oe2203sp1"/>
  <changelog author="liushaofei &lt;liushaofei5@huawei.com&gt; - 1.8.20-13" date="1627905600">- fix incorrect arguments format</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 1.8.20-14" date="1631275200">- fix rpath error</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
</package>
<package pkgid="a7bc6033ae9cb16cb77e3ac694f7552f1cdbbad58dc8c2f1e8fb094180483490" name="hdf5-openmpi-static" arch="aarch64">
  <version epoch="0" ver="1.12.1" rel="6.oe2203sp1"/>
  <changelog author="Ge Wang &lt;wangge20@h-partner.com&gt; - 1.8.20-15" date="1652184000">- License compliance rectification</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1.12.1-1" date="1655985600">- Upgrade to 1.12.1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
</package>
<package pkgid="6d4ece962b328f1576555d132c3c19a1da03706f5b0cd7471e28ab9def5c9050" name="hdf5-openmpi-static" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="02650adbc0f39218593e2b3ac430b0011bb8ec3f5d8242ecb22cf73044beecda" name="hikptool" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="7.oe2203sp1"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-1" date="1665576000">- First Spec Version Include hikptool Code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-2" date="1666785600">- Add roce/roh/cxl/serdes/socip/pcie features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-3" date="1666958400">- Add sas/sata features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-4" date="1668600000">- change the hikptool permission to 4550</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-5" date="1669291200">- Add nic_ppp dump mac and vlan function and change the hikptool permission to 0500</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-6" date="1670846400">- Add socip patch for fix return -EINVAL when the parameter check fails</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-7" date="1670932800">- fix compiler security option problem</changelog>
</package>
<package pkgid="679a68686d8132aee7a3e58db62b414caba749afb63effd39d5111500439197b" name="hikptool-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="7.oe2203sp1"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-1" date="1665576000">- First Spec Version Include hikptool Code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-2" date="1666785600">- Add roce/roh/cxl/serdes/socip/pcie features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-3" date="1666958400">- Add sas/sata features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-4" date="1668600000">- change the hikptool permission to 4550</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-5" date="1669291200">- Add nic_ppp dump mac and vlan function and change the hikptool permission to 0500</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-6" date="1670846400">- Add socip patch for fix return -EINVAL when the parameter check fails</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-7" date="1670932800">- fix compiler security option problem</changelog>
</package>
<package pkgid="82d31a29e5e36e15dfa2a2a25f8e31157df1e3a0f8638669d1f273df7d384464" name="hikptool-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="7.oe2203sp1"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-1" date="1665576000">- First Spec Version Include hikptool Code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-2" date="1666785600">- Add roce/roh/cxl/serdes/socip/pcie features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-3" date="1666958400">- Add sas/sata features source code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-4" date="1668600000">- change the hikptool permission to 4550</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-5" date="1669291200">- Add nic_ppp dump mac and vlan function and change the hikptool permission to 0500</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-6" date="1670846400">- Add socip patch for fix return -EINVAL when the parameter check fails</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-7" date="1670932800">- fix compiler security option problem</changelog>
</package>
<package pkgid="a77107783a86235a895b0129761fbaf0c4faf0ea0725ab2b5639d725b31363cf" name="hisi_hpre" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="2.oe2203sp1"/>
  <changelog author="zhongkeyi &lt;zhongkeyi1@huawei.com&gt; - 2.0.0-1" date="1645531200">- update kernel to adapt uadk</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 2.0.1-2" date="1678449600">- Add BuildRequires uname-build-checks to get correct kernel_version</changelog>
</package>
<package pkgid="08690dbad2e6e65c8194c6d42fb1a745541c8629c3824fe7038d40f1ded300ba" name="hisi_sec2" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="2.oe2203sp1"/>
  <changelog author="zhongkeyi &lt;zhongkeyi1@huawei.com&gt; - 2.0.0-1" date="1645531200">- update kernel to adapt uadk</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 2.0.1-2" date="1678449600">- Add BuildRequires uname-build-checks to get correct kernel_version</changelog>
</package>
<package pkgid="ae64a114da48a33c79971b55bdf7e25169a6c4898a8e3b7fd7a8fd3e570d9a07" name="hisi_trng_v2" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="2.oe2203sp1"/>
  <changelog author="zhongkeyi &lt;zhongkeyi1@huawei.com&gt; - 2.0.0-1" date="1645531200">- update kernel to adapt uadk</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 2.0.1-2" date="1678449600">- Add BuildRequires uname-build-checks to get correct kernel_version</changelog>
</package>
<package pkgid="e219a025b2918f87316716cf0526cc3e0d7384dd40a0245806e0b3f6685a795b" name="hisi_zip" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="2.oe2203sp1"/>
  <changelog author="zhongkeyi &lt;zhongkeyi1@huawei.com&gt; - 2.0.0-1" date="1645531200">- update kernel to adapt uadk</changelog>
  <changelog author="panxiaohe &lt;pan_xiaohe@hoperun.com&gt; - 2.0.1-2" date="1678449600">- Add BuildRequires uname-build-checks to get correct kernel_version</changelog>
</package>
<package pkgid="cb4a5bc6bc9036c83cc2c15425a98adfa70945be315070208db5981838271d62" name="hsqldb" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="f1ee5fc22e08cf5348e39b4449a0c24e9a0556944462d6feb2ffd62512b488ea" name="hsqldb-demo" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="efff4a21e9f9f04a8bce0abfe3add7eecab9e93f925fb4d074c17740aa30b798" name="hsqldb-javadoc" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="6625ee3f44325d6ac31ab524a31c89cfd5121b81f1f094983901e6693722761f" name="hsqldb-lib" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="9cf00779c3cc732fe8d228929868cc39aa8f548dc95b626715b861ec48374b2b" name="hsqldb-manual" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:2.4.0-4" date="1669204800">- Modify invalid Source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.4.0-5" date="1701950400">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="7395573895da2fee567f5251ce7aaf43db30ee8844308dcb3f5daecb4ea55ca5" name="hsqldb1" arch="noarch">
  <version epoch="0" ver="1.8.1.3" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.8.1.3-2" date="1652097600">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.8.1.3-3" date="1702468800">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="e4058a0b5997a0af753f8ac0503f0afb4b1c47bf0dd597e5c33cc9cc958c24de" name="hsqldb1-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.1.3" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.8.1.3-2" date="1652097600">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.8.1.3-3" date="1702468800">- Fix CVE-2022-41853</changelog>
</package>
<package pkgid="178ad216e70eb758f36c55ec138b3f7c58a571ddd14405157e1e03b0dcb34489" name="htop" arch="aarch64">
  <version epoch="0" ver="3.1.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.1.2-1" date="1642593600">- Upgrade to version 3.1.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 3.1.2-2" date="1701172800">- Backport upstream patches to fix htop crash in container</changelog>
</package>
<package pkgid="5823471ec79e2a7a35fd0e594626f8c0b019ebaec46dcc0301a94538a59f90a4" name="htop-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.1.2-1" date="1642593600">- Upgrade to version 3.1.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 3.1.2-2" date="1701172800">- Backport upstream patches to fix htop crash in container</changelog>
</package>
<package pkgid="306d8d0be3d6bab55f2346773378bfd249a9b8aee2b027e2ab6e54b3c375687b" name="htop-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.2" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 3.1.2-1" date="1642593600">- Upgrade to version 3.1.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 3.1.2-2" date="1701172800">- Backport upstream patches to fix htop crash in container</changelog>
</package>
<package pkgid="507db3d6b15d166e503bc7921483f0366915d23e503b1e59336b3d97bcc7dcb2" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="94de66a69816997f748c0537a6b2289ea306a7550a6388e7fb3fecfb1a82935a" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="79c1952352d932142c1b35d0977ab5cb87f6b76bb3717a9e836228af2d8792e5" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="895dfa2c41d24957818d091d6caeb858596d8e1f120e0466c0f3057212fa4c66" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="3337b5119d7f86d395d8c943637251aa97eba57b1da8b72033132eaba4724508" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="f4ff85985106180963bae004799e98b2a6bb8a14198200508dcb271744b98493" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="e27099041e160d21d0b896424162ef26bb99bebd47565fbede08707d5a0835a1" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="97c6861cdaadc65d7f69a7baab84da36a790849cfe4512d71ddc77016f350a33" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="b797fd24db42b191930fd4c3d33939b1e11973dd1fa61635ba7c513aaa74765a" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="5b36aa8638f653812753b6fc515f7d6a7387bba8231e85c695da3225eed8f304" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="06a6144a215c831b0eee76e626bd56f9786343e1cbc4580e9464cab22d8ff390" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="84683a2df89e318c77a18a0cc6b59d912d4b8e7f71d4e087fa1f2f0fdfbfa8a8" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="3053f2422d5adc44d3755e9096eda032b9cfaa1aec9fb427d4a08ded81e2a6aa" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="effaaa0929546d898acfa95068c8c3c714d1bf29ea8df1962f3ffe51d2882deb" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="257519156cabbc4022e56d8c3355bcfbebd92bc36a6ab4fa975febc0f6496b25" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="59e4521263c7920d87f4602eccfed2c04d4aa2a97caabd4bd0cff585209e29e0" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="13b4dc2fd66cf1af614e954ed1a799079cd998be0e0fb6c1914364b9571c0b0f" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="5718894007c362a00b8e5dafd36e8fe27ae61cf53c17f2d0e7cd3cf867c58dd4" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="56db9081883b1fda9bdebbd951c171d6f590ce58ac7b2aef4fcdeabc17163f85" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="9d3349e245384ae4aaaca0dc8951892361ee5aee53a11eb4f9104007d5134a99" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="8b9ebc1b76380402f26a346759c18963f87e65b244711bcb367009288213cae2" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="af989ae3ba088d75441cb87bfe754210552d50e5327a3be7f8dbc1f5b8ce5caa" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="b567b2af782aa6c8a343e815d259447f247319f35b8fb16179a95c181b78f625" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="04dad31f46382092f8a396bcfdfb3b2aae258e827b22a6652d3ecbbb9bfb01bf" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="ff21928198fd2986166dc5a870a59545d119d9dc0aa3be106057e6e9f3344a1f" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="4e5956ddf2b780d3b631f735917792460c77093d42bbceb9aa846086364ed453" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="301c051de940c6d3e7e21642e70021c6706c3d5f6cd542c695f62505c9b56722" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="61322154e6333e293cca63a85fd973c132f289a3574318dd0342f0dd97200317" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="0028eb02d21873a9f3fac9fda3b16c2717c890c11c1961235c118209b20ecc4c" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="b2b0471ef9551ea6af6d63b7e8d6a19f8f3d5a78882571afab721c978fa73649" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="9078a28742f8876e296bdb5114c5c4b65caaf863a0cde29d95203cc84a2f2975" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="a348fe5a109cc30303475b5760f510539de65305e710a020e725354528caedbb" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="cb3832c0a4260050f2cfcbf5df117abe737b5d275efbb6a99077e8fef5f71045" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="96085c6a0bfecd220feb8c0bea468ed338535f8f74a4f4b92d485815fe01c4a2" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="e8e6d25146c580e3e8aa301db67d16e2dc2f54c7528e449e1d7420f9a295df54" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="b9e79a1dd009a4a2211f1d207c1cbf57f8322ed1dd8819ae757685755792821a" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="b6c04f89fec6fa81d898ec01b777d34490cb93fed559951f0df80bde6625ca29" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="13.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-4" date="1647518400">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.51-5" date="1647604800">- Type:cves
- ID:NA
- SUG:restart
- DESC:fix CVE-2021-44790 CVE-2021-44224</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
</package>
<package pkgid="4bfce039729622ae23563bef4c9b973ece050f32572c5326f9151317ba87572f" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="15.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-6" date="1653912000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:switch from PCRE to PCRE2</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-7" date="1655467200">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-28615</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-8" date="1655553600">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 2.4.51-9" date="1658318400">- Type:CVE
- ID:CVE-2022-28330
- SUG:restart
- DESC:fix CVE-2022-28330</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.4.51-10" date="1670846400">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:change default value of HeartbeatMaxServers
       fix setting and comparison of IPs fileds
       avoid voerflow in case of indecently large session
       make ap_escape_quotes() work correctly
       fix lua_request with cast first
       Handle children killed pathologically
       mod_md do not interfere with requests if challenge type http-01</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
</package>
<package pkgid="965fbe02b5fac9029112309272c3e3eb21629f9ad64b1798aa3bcb90f31675bf" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="20.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-11" date="1671019200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix the name of the CVE patch</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
</package>
<package pkgid="0581fd850ee2b24bfb0eae0e85bfbdbde0490f7cbfdc4b02da4b5e7c322d2555" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="21.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-12" date="1671624000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:reduce the dependency of httpd on system-logos installation</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
</package>
<package pkgid="1204740fe16bf68137d4b05f74711fcabf75864a6eb57793548c9942d273adab" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-13" date="1675339200">- Type:CVE
- ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="dd44357507ef7f2c07ff256a42caafb0ca5e36e928cfa95c2538b74da766719f" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678363201">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681387200">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="e447c0169e9b270f2b247f57f4c8dcdb75c2472a002109bbccd66be2b8b0231e" name="hwloc" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="4c0d7bf8a0f975258cba4b664173e9ab7cb2be9f146328ce7cee8f014d91d3bb" name="hwloc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="123e5a4413e8374c615626ee6a6a80d108bac6097206f596c287a7b310ba19ab" name="hwloc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="6046445e2b368a199c9028cb02037cf02c1bd9df1b9a3ffaaf6c865da21c8bdd" name="hwloc-devel" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="6bae60c4dde81fe40872ad1b882c41da7773f78668047bd6514ae61126f2f198" name="hwloc-help" arch="aarch64">
  <version epoch="0" ver="2.7.1" rel="2.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1.11.9-5" date="1652097600">- License compliance rectification</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.7.1-1" date="1666094400">- Update to 2.7.1</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-2" date="1693396800">- Fix CVE-2022-47022</changelog>
</package>
<package pkgid="9bfedf160af9d4df47a86643dc317ff3340d57c517564cb597d0a37b58fc4e81" name="hyperscan" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="83cb224a7464ec509abea981a06a8d072974cf588353325dfba245fff4dc15ac" name="hyperscan" arch="aarch64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="a58ed9d69e1e0c282cf9af34a7f1e8286945699cb7a2342b7d8b340a415940d2" name="hyperscan-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="28beca3d73ba079165da82058353b01473a7966d1e72269ec717159912963104" name="hyperscan-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="b9bbd70a2f50bbee904cf59cc478663b183e720936d71709b55243b3334e97ca" name="hyperscan-debugsource" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="d756294a324ff254553ec23a257e3c2de9097c8569fc643262e3c1c3b79752c1" name="hyperscan-debugsource" arch="aarch64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="78818d75c1453a34f55c094bc96ce1636380a334f26405b5858689799702ee44" name="hyperscan-devel" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="3.oe2203sp1"/>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 5.2.1-3" date="1627128000">- Fix build error on X86</changelog>
  <changelog author="wangyong &lt;wangyong187@huawei.com&gt; - 5.2.1-4" date="1628078400">- Fix build error caused by GCC upgrade to GCC-10</changelog>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
</package>
<package pkgid="0f24045712221abc3128f8ac71c67788fa57a0975c214815259841272c5929e6" name="hyperscan-devel" arch="aarch64">
  <version epoch="0" ver="5.4.2" rel="1.oe2203sp1"/>
  <changelog author="sdlzx &lt;hdu_sdlzx@163.com&gt; - 5.4.0-1" date="1633521600">- Update to 5.4.0</changelog>
  <changelog author="Liu Zixian &lt;liuzixian4@huawei.com&gt; - 5.4.0-2" date="1666267200">- Sync upstream bugfix and enable regression test</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.0-3" date="1681992000">- Fix CVE-2022-29486</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.4.2-1" date="1693569600">- Update to 5.4.2 for fix CVE-2023-28711</changelog>
</package>
<package pkgid="e8cc66b515150a8cc32a4428592a4181e83e3fec7132fa6783585206e3781f16" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="1.oe2203sp1"/>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.17-6" date="1667390400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cleanup module memory leak</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-7" date="1668600000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update tar package from source</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-8" date="1669032000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cannot install isulad and unknown option</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-9" date="1669377600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: add primary group to additional groups</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.17-10" date="1669636800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove chmod 751 permission for dirs by engine when user-remap enabled</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-11" date="1670328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-12" date="1671192000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-13" date="1671451200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-14" date="1671710400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove clean_module_fill_ctx for libisulad_img.so</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-1" date="1672747200">- Type: update
- ID: NA
- SUG: NA
- DESC: update to v2.0.18</changelog>
</package>
<package pkgid="1d39b472e1d395d325808f6ab650c2512f3ad36ddb88a907633da406ae9235a7" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="13.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-4" date="1678363200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="0901e31d63bc188bf578079c3e6b2fa4003f6eb1b96f8ce0b2e017d8ff9a42df" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="14.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="e7b02c2f441dd55b42644a6ab656de38822be84ce0c7c7b2eefe5cf2929f2d03" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="16.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="549310dbf4a41e65d3928c19ae6b8e628cf69d4eba96efb17c58f72cae1e2e37" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="17.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="50be440e43293354c12cce3c203dd2d463854d7342b6f328b0e97c5290a2361c" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="18.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
</package>
<package pkgid="9ca747726a392580dee7264c40545dbd9fe5fb4014f0398efe8fc74d456807f1" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="19.oe2203sp1"/>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.0.18-19" date="1729252800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="d87a9663916f6542397546c85633c104e5491ca31df26b69e87726e4dc48755c" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="1.oe2203sp1"/>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.17-6" date="1667390400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cleanup module memory leak</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-7" date="1668600000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update tar package from source</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-8" date="1669032000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cannot install isulad and unknown option</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-9" date="1669377600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: add primary group to additional groups</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.17-10" date="1669636800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove chmod 751 permission for dirs by engine when user-remap enabled</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-11" date="1670328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-12" date="1671192000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-13" date="1671451200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-14" date="1671710400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove clean_module_fill_ctx for libisulad_img.so</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-1" date="1672747200">- Type: update
- ID: NA
- SUG: NA
- DESC: update to v2.0.18</changelog>
</package>
<package pkgid="8a679f752ec4bc98dde10048c1bb15f2eef3ef12cd013820c17a101a3659166b" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="13.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-4" date="1678363200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="5a45bf5507135a3215377cd2bd33d18d80656c3e739c8b0a7fba866d9b58d79a" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="14.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="3078ceea26c25171f3cffeed027dc33560ae4905da2bee0c8ce4ac1f51d0325c" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="16.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="cea4ab5633e84c6b0a187cf4e87a87b88dda86d8ca3e91890f5e32a73aab0cf2" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="17.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="b2bb1b92dea2935f168e711d67bbd398a7b25f26365cb975422a0013bc0bef53" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="18.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
</package>
<package pkgid="b33f69da3347fc9e556671392d89332014bde14301076f3a693d0d3e5a7fe1cb" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="19.oe2203sp1"/>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.0.18-19" date="1729252800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="cfac6ace5732421783c627cf7f4977320f8669dd34354e41983ddd0920e22cb5" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="1.oe2203sp1"/>
  <changelog author="wangrunze &lt;wangrunze13@huawei.com&gt; - 2.0.17-6" date="1667390400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cleanup module memory leak</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-7" date="1668600000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update tar package from source</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-8" date="1669032000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix cannot install isulad and unknown option</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-9" date="1669377600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: add primary group to additional groups</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.17-10" date="1669636800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove chmod 751 permission for dirs by engine when user-remap enabled</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-11" date="1670328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-12" date="1671192000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-13" date="1671451200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: update lcr dependence version</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.17-14" date="1671710400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: remove clean_module_fill_ctx for libisulad_img.so</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-1" date="1672747200">- Type: update
- ID: NA
- SUG: NA
- DESC: update to v2.0.18</changelog>
</package>
<package pkgid="eeb048763c3b0acc59dff04279c3405ef692fe60871cbd59811499a1cf448880" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="13.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-4" date="1678363200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="b03e3333f482e10f745d1c4f50a91327477cf462e722c714837bf72a60e77aa1" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="14.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-5" date="1682337600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for runc and cri</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-6" date="1683201600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="4a4418e0edcc9f2f25e4b468660e1aaa80e2d8889290d8fcca3715bd5cec7cb7" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="16.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.18-7" date="1683288000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix memrealloc size error and convert struct</changelog>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="96fd5adfb1c8ac3541204aa1c17e9cf782e27e74cac8248c77494ab85a3bfb51" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="17.oe2203sp1"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 2.0.18-8" date="1683547200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix bogus date in %changelog</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="32662b123d32fe76b12498b2dcc993cd6eacaeb44c92f646244940f3084e1aff" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="18.oe2203sp1"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 2.0.18-9" date="1685620800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
</package>
<package pkgid="e2ea12711113bda0f3bc87e6d310e6d7073d5828ffd5620678d8ca6ffac0a0db" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.18" rel="19.oe2203sp1"/>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-10" date="1689768000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-11" date="1692100800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-12" date="1692878400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: code improvements and bugfix for code review</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-13" date="1695038400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-14" date="1703160000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 2.0.18-15" date="1703851200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: keep the service status unchanged after iSulad service upgrade</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-16" date="1706616000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-17" date="1710849600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.0.18-18" date="1718107200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for env/cri/fork</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.0.18-19" date="1729252800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
</package>
<package pkgid="30c56c5258ed960fdaeeb46e80fb1014c4ca52de4f95088862635f9fe2fecb8e" name="ibus-typing-booster" arch="noarch">
  <version epoch="0" ver="2.16.0" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2.16.0-1" date="1655812800">- Upgrade to version 2.16.0</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.16.0-2" date="1705320000">- Avoid verbatim bidi formatting characters in the source code</changelog>
</package>
<package pkgid="ca313c4ec6dc6e9c41d7af7ddb024dbd4ec78d4fae7800abe85ed9fac0d3eee7" name="ibus-typing-booster-help" arch="noarch">
  <version epoch="0" ver="2.16.0" rel="2.oe2203sp1"/>
  <changelog author="SimpleUpdate Robot &lt;tc@openeuler.org&gt; - 2.16.0-1" date="1655812800">- Upgrade to version 2.16.0</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.16.0-2" date="1705320000">- Avoid verbatim bidi formatting characters in the source code</changelog>
</package>
<package pkgid="9f25774a017a7f952aaf5b9e0b19e5d61ae6b2d11aa793e4fafbedca3b9e9d11" name="icedax" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="51.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.1.11-46" date="1666699200">- rebuild for next release</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.11-47" date="1667476800">- add sw64 patch</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-48" date="1668600000">- fix empty link</changelog>
  <changelog author="wangkerong&lt;wangkerong@h-partners.com&gt; - 1.1.11-49" date="1669204800">- fix spell error</changelog>
  <changelog author="yueyuankun&lt;yueyuankun@kylinos.cn&gt; - 1.1.11-50" date="1698667200">- Type:update
- ID:NA
- SUG:NA
- DESC:delete Requires git</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 1.1.11-51" date="1704369600">- Type:bugfix
- ID:NA
- SUG:NA
- delete autosetup macro in changelog</changelog>
</package>
<package pkgid="e7af23cab2797b7b96fcf3903237fb7e80416fdf7af0e590c2bf087014e8420f" name="icu" arch="aarch64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="b575b0804209cc992aac4b66e80efcef206e84854763dfb98aba48a9c35d62f2" name="icu-debuginfo" arch="aarch64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="bbeddb8f265e15ac7ad3d7d5e92cb20678db9d051eb747c883ba21d01c905fd4" name="icu-debugsource" arch="aarch64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="2bb706452a6646cd5d6b41a1b69cdb941b4c9811f99c374bfa006f65621bd2e6" name="icu-help" arch="noarch">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="97c50f6c318897dda53a72d65058834cc7c6ada40ecff619f2ad892ce2262928" name="indent" arch="aarch64">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="cda66cc409062829f53f44bcf86dac93abba1cd967687449fcb582d457d8b876" name="indent" arch="aarch64">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="bee0b36f684c187faba5ffa8294938b83d965566bc982cd1540bed53e4426c32" name="indent-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="3649fcee7bfd395eeb33de4688c14aeca8e0b9671392e0f5de11bc0a371dc0b3" name="indent-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="060eb1c2de9fa5576ff50951cee0f773d42eb140b22eab145bdb1e68cf9f88b8" name="indent-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="8ea6a24b499a08425c31b399b1bad8aa63eccdb1ba563d8717765c348997eca9" name="indent-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="2016d05044c698d7fca4bf903a37cbb37eb0486624ee3ba3e32e03668e38d395" name="indent-help" arch="noarch">
  <version epoch="0" ver="2.2.11" rel="29.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
</package>
<package pkgid="184f8e9d7554c9d799893da3e538667c759326919de71e56a7f9d04d2ee0c4a7" name="indent-help" arch="noarch">
  <version epoch="0" ver="2.2.11" rel="30.oe2203sp1"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.2.11-29" date="1693310400">- Fix CVE-2023-40305</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2.11-30" date="1707134400">- Fix CVE-2024-0911</changelog>
</package>
<package pkgid="4dc776003e8bd01cecd08d6e119e5685706526575b9d0743fe6ba050317d550c" name="infinispan" arch="noarch">
  <version epoch="0" ver="8.2.4" rel="13.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 8.2.4-11" date="1667995200">- Change source</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 8.2.4-12" date="1713009600">- Add -Xmx4096m for riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.2.4-13" date="1716811200">- Fix CVE-2019-10174</changelog>
</package>
<package pkgid="d244abb101e4eba8b2ae124f743917a3681317190369d4f36f62f8dcc6c24d6f" name="infinispan-help" arch="noarch">
  <version epoch="0" ver="8.2.4" rel="13.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt;  - 8.2.4-11" date="1667995200">- Change source</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 8.2.4-12" date="1713009600">- Add -Xmx4096m for riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.2.4-13" date="1716811200">- Fix CVE-2019-10174</changelog>
</package>
<package pkgid="041d4e0195e05369bbba32ff749a3ab30a5760cb8dc48a187fca17a41e74102e" name="iniparser" arch="aarch64">
  <version epoch="0" ver="4.1" rel="4.oe2203sp1"/>
  <changelog author="liqingqing_1229 &lt;liqingqing3@huawei.com&gt;" date="1602590400">- update source0</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 4.1-3" date="1611057600">- Modify license information.</changelog>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
</package>
<package pkgid="432d3f852712b2e854e0a07d24b918f398721e5a7d578e95f99ce0480e7328bd" name="iniparser" arch="aarch64">
  <version epoch="0" ver="4.1" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
</package>
<package pkgid="0d3f781f80666b8b8c90b13c07d3c521655140ad4552f0a98befa0e15adc2255" name="iniparser-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1" rel="4.oe2203sp1"/>
  <changelog author="liqingqing_1229 &lt;liqingqing3@huawei.com&gt;" date="1602590400">- update source0</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 4.1-3" date="1611057600">- Modify license information.</changelog>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
</package>
<package pkgid="dcf85d0ab7a36ced09cfc7de202dbe864ed0bc0adeb5af26ff426625a2e7e456" name="iniparser-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
</package>
<package pkgid="562917e0914e8d2e2575dd8fb6d3c86bcb48d8d0462937bd6e73e9f58993deed" name="iniparser-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1" rel="4.oe2203sp1"/>
  <changelog author="liqingqing_1229 &lt;liqingqing3@huawei.com&gt;" date="1602590400">- update source0</changelog>
  <changelog author="Ge Wang &lt;wangge20@huawei.com&gt; - 4.1-3" date="1611057600">- Modify license information.</changelog>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
</package>
<package pkgid="79d5e0510d98ddd999bad41abb121ec12562713332a242913f5222fc2b47fd79" name="iniparser-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin20@h-partners.com&gt; - 4.1-4" date="1661169600">- Fix not striped problem
- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
</package>
<package pkgid="bab89ab8c0d7975f74b0ae1a13067e9aed3d0305d176f3738d37dfb74e3a17d7" name="initscripts" arch="aarch64">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="2ab882fe340c76afd123badd450427b32c2a5e014a94e458c542674d432e1932" name="initscripts-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="4efb19381eb2c412af46a05261c50f67546ac4c620df30bce7a002fda77cc774" name="initscripts-debugsource" arch="aarch64">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="b077c19bbf5807258fd339cad6dd55115cdd65182a1b04a9e5b178b310cca13c" name="initscripts-service" arch="noarch">
  <version epoch="0" ver="10.17" rel="2.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 10.06-2" date="1627905600">- DESC: delete -S git from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 10.12-1" date="1640001600">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update initscripts to 10.12</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
</package>
<package pkgid="ebac673ede7837ddf6b6957b346090bec2c120a49250d58666eb574cf675d4cc" name="install-scripts" arch="noarch">
  <version epoch="0" ver="1.2" rel="6.oe2203sp1"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.1-1" date="1646049600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:initialize the source code of install-scripts</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.1-2" date="1647604800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:get SI_GRUB2_PATH by ID in /etc/os-release</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-1" date="1649419200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to version 1.2-1</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-2" date="1655985600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for nvme disk</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.2-3" date="1660651200">- Unified license name specification</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-4" date="1667649600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add support for mbsc</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-5" date="1671451200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:after executing hook scripts, remove their executable permission
       of non root users</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1.2-6" date="1675425600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix missing Patch0003 in spec file</changelog>
</package>
<package pkgid="ad7565e5b75e7bae9bc6ba27adc6c7b32b5c3cd9664969f4129e5ab3ed3a6266" name="iperf3" arch="aarch64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="d939ed400e3a2adeaa4a08aee908be4f41425cb047a3c6c53555d4117173b9e5" name="iperf3" arch="aarch64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="facfb676eb3077c5596010b8f5e3f9746861ff190ed108d031278c1533b9f3c7" name="iperf3" arch="aarch64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="4c813624688f4c1dd19930a73f2fd291a7cac71613c49734b1359c7af77d3a8b" name="iperf3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="a33d13d8ffd35ebc5f66dd1dcbf1c122cd07dd72d3f73a6dbad4b7fa02ef8dd3" name="iperf3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="0dd15a28b1536aa819067008180bb1f505f900e8aa8ec4a19625fdc2efe373e5" name="iperf3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="2ea5cfd2d7633270b11fde6ad509b7f50919154efde5edb915735261044b007a" name="iperf3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="cba3ff407690fe846838a453ca502bc11cabb91a0770f7759baaa6ea63b045a1" name="iperf3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="f973b9abe28b72fd8f4ac928e42c7cee5c29e958deeaff27497cb6ea7d281c92" name="iperf3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="ff823da488d8816d07f2afea38b695c7e779f933cc4e3f552564f4099c67f971" name="iperf3-devel" arch="aarch64">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="5e88b5ad56084b3f0e50d780271866af7ce7c90f8f6c37b3e1bd8d3fa7005b41" name="iperf3-devel" arch="aarch64">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="1ac7f6ccc42167fb0f50823c42f210e65e3a33b3d7382b2d8b769f30eee01922" name="iperf3-devel" arch="aarch64">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="b423cc80e24ff3352aeb4b7d8204895dd7e09737d0bd56fcc242909b386f1063" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.10.1" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 3.10.1-1" date="1641297600">- Upgrade to 3.10.1</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
</package>
<package pkgid="6cb858b28171102dca31ee6d1ea38a35bd80bbf70bb32d0cbd1f91a7a0665b4c" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.16" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
</package>
<package pkgid="50b1768585f3f5e7d9df289be22a1d3e1e28c1bd3e107051cbe1dc33287de42e" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.16" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 3.10.1-2" date="1668427200">- Modifying the source code package address</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
</package>
<package pkgid="fbd004eb4c613abc4bd85c2c45d01d6b6ae1133234885da17503015443d649a7" name="iproute" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="dc81b3c91ffbd4ccd1210e90059389a2ec4c0ee739fcd25ec2706e1184c2d326" name="iproute" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="f5d78dcf2e956a5b575294a8b39bc184e112551c2474a32e0a5da0d1f3db2766" name="iproute" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="43d17e3a9c76a29cbec5127c2b902ef54369255a9c76d4fd3a9bf7fe94f9251c" name="iproute-debuginfo" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="0c055b342cf88b201e9779b282ce21fe3c6e5886e067c65db8b5c4db54a802d4" name="iproute-debuginfo" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="08f5e0fe07aca5aa70e661fdc61816c16a7285b05198067eaa3bd68bcea8be0a" name="iproute-debuginfo" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="d37669fc4e15d21ff511fab184ced0e314fd7be8523f38bb92f415828445891c" name="iproute-debugsource" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="760a879958fe1a74826c35bbfbab25fc0f844838474b9c12898088f57d4a38d5" name="iproute-debugsource" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="e5596acfde16b10e5657475af17cf0f3ae1c6e8a0583d1d43e55d441fe73dfde" name="iproute-debugsource" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="78bac2d8804eb7af31741fd6a86484908f2d6169d28ab81f11f8ad09ed1857cd" name="iproute-devel" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="d1f33cdfa7335387a2edab000fa8889fa3594c75671df6800ad99acc4c8217c4" name="iproute-devel" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="479acc32b3628d08bb5a4eff8318119a7020358221772d332933259a513d30b9" name="iproute-devel" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="93b50e0a41e56fab5e41749ca5a96519df4552ce46cb8c487f74662d1eb685ab" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="12.oe2203sp1"/>
  <changelog author="jiangheng&lt;jiangheng12@huawei.com&gt; - 5.15.0-3" date="1646136000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove libcap-devel dependency</changelog>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
</package>
<package pkgid="205d71d572f085557da5e9a1eeeb42191bd9c969354e3d135f08afe1f6a73987" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="13.oe2203sp1"/>
  <changelog author="sunsuwan&lt;sunsuwan3@huawei.com&gt; - 5.15.0-4" date="1661515200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:lnstat: fix buffer overflow in header output 
       libnetlink: fix socket leak in rtnl_open_byptoyo
       lnstat: fix strdup leak in w argument parsing
       q_cake: allow fix buffer overflow on large labels
       tc flower: fix buffer overflow on large labels
       tc_tuil: fix parsing action control with space and sl
       tipc: fix keylen check
       fix devlink health dump command without arg
       tc: em_u32: fix offset parsing
       l2tp fix typo in AF_INET6 checksum JSON print
       ip: Fix size_columns() for very large values
       ip: Fix size_columns() invocation that passes a 32-bit quantity</changelog>
  <changelog author="jiangheng&lt;jiangheng14@huawei.com&gt; - 5.15.0-5" date="1665403200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bridge: fix memory leak when doing fdb get
       mptcp: fix memory leak when doing 'endpoint show'
       mptcp: fix memory leak when getting limits
       ip neigh: fix memory leak when doing 'get'
       ip address: fix memory leak when specifying device
       fix marco expansion in changelog</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 5.15.0-6" date="1667995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add ipvlan l2e mode support</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
</package>
<package pkgid="d840ce5647f36288701f119e1de6b9444cacebeac6e8ae5b86d3dc9308b01dbd" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="16.oe2203sp1"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-7" date="1669032000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable make check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-8" date="1671624000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancle man page check</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-9" date="1671710400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:cancel some test cases that failed due to host configure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 5.15.0-10" date="1675252800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-11" date="1675857600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add epoch version in changelog to fix check_spec_file ci failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-15" date="1692964800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-16" date="1698235200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
</package>
<package pkgid="95d0ad6ae523c9d34d6e60c41fc9eeb0b67b57f70290356829b4b5e7d217f7d0" name="ipset" arch="aarch64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="a58674d70cd196d5b5e7de7836127b5ad2fab02d8258e8eca49c8cc0a3ead968" name="ipset-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="4faeb7398690a6dc19a4fe774131db346eea153e69cd1dfe459e6e1ee6f22b69" name="ipset-debugsource" arch="aarch64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="2bd723377307cc017975819bad2a01b0b5e752a460c695c423c11cb8ba8de642" name="ipset-devel" arch="aarch64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="4e7ac582abd0488ded8f8d04d07eff9379c87c459488718034c1bb7b0af28811" name="ipset-help" arch="noarch">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="7f7f387d102d8dd19549ecc742607b7993dbd293c84b25ec1809803ec7164603" name="ipset-libs" arch="aarch64">
  <version epoch="0" ver="7.15" rel="3.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@huawei.com&gt; - 7.15-1" date="1638619200">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update ipset to 7.15</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.15-2" date="1666267200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix IPv6 sets nftables translation</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.15-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="192ce1d80008957fe7171cd8d6148765543a2c5f05ea5573df112338850a2ac2" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="6f0fd57f36d0eb33cfcbd6145c50c09f471b30ed39e557962a54af18c3f2ddbd" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="58f0d0fe9b6f2770ecfd8d358f0ea15f772184a5b7aba6017714e7e94e119075" name="iputils-debuginfo" arch="aarch64">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="923df2ef785678e31d9284e1b598602863960c032548a98f387a6b1ac0db7d9e" name="iputils-debuginfo" arch="aarch64">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="6a6199f3243967430131a3356dfd312a98052c586646b34c2591043bf3647130" name="iputils-debugsource" arch="aarch64">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="26a6716f38251dbf4a221639cbae65ba44e0dd0bd73933bbd5a7ebbd798c3607" name="iputils-debugsource" arch="aarch64">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="22b2ad540b879156c80648644c1291a15e16047cba521912bfb7c912b454b109" name="iputils-help" arch="noarch">
  <version epoch="0" ver="20221126" rel="1.oe2203sp1"/>
  <changelog author="xuxiaolong &lt;xuxiaolong23@huawei.com&gt; - 20200821-2" date="1615204800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rdisc: remove PrivateUsers=yes from systemd service file</changelog>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
</package>
<package pkgid="9dea90c6931665c0f9805593b4130dff458b6523183c41e4d6796f47fa1eab57" name="iputils-help" arch="noarch">
  <version epoch="0" ver="20221126" rel="3.oe2203sp1"/>
  <changelog author="xihaochen &lt;xihaochen@huawei.com&gt; - 20210722-1" date="1638878400">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20210722</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20210722-2" date="1645185600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix arping -w command return error</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-3" date="1646481600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revert process interrupts in ping*_receive_error_msg</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-4" date="1646913600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to fix no reply when ping6 from Subnet-Router anycast address</changelog>
  <changelog author="zengweifeng &lt;zwfeng@huawei.com&gt; - 20210722-5" date="1650974400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix ping2 bingding to VRF and address
        Avoid binding to non-VRF
        Fix ARP protocol field for AX.25 and NETROM</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 20210722-6" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix exit code on -w option when count*interval &gt; timeout</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20210722-7" date="1669896000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: update Source0</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
</package>
<package pkgid="bb9aaca79f31596fac132f315f55b5eede8fb8fa4e5ac989ae69f13d1d57fc93" name="jackson-databind" arch="noarch">
  <version epoch="0" ver="2.9.8" rel="10.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.9.8-9" date="1647000000">- Fix CVE-2019-17531</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.8-10" date="1702468800">- Fix CVE-2020-36518,CVE-2022-42003 and CVE-2022-42004</changelog>
</package>
<package pkgid="bb161d30615e24b90107635cfdc7c401fba9ae3ebb853dcf528209f689e30881" name="jackson-databind-javadoc" arch="noarch">
  <version epoch="0" ver="2.9.8" rel="10.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@huawei.com&gt; - 2.9.8-9" date="1647000000">- Fix CVE-2019-17531</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.8-10" date="1702468800">- Fix CVE-2020-36518,CVE-2022-42003 and CVE-2022-42004</changelog>
</package>
<package pkgid="2f636362b5079875feedc930a9064ab2de51ab4cf36122ab6f6f33a1f241eb62" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="2b898e238fc8f56e89239f6c3799aa518f42011635b6c4b18700dab26d48a785" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="c70061494765710e24e82bf788d8f25d5574c4521166738c904bb591c062d524" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="6e6e4eada5d0f66ac442f20a2d19444d5351b43ad114113aa178de2a0444641c" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="09fac615a600cddec23a0071d1f377e1d8d24dfe01eb3000d9d217621b0ac3da" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="b4159bb73dff52ab3f5d550ad01972fa4dbb1add0c1c726ce7e6375d97fc8ce6" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="ae5e558f8ee697791b6c3f188e3d3132eb8d038721ac019a3ca249754c4d5c90" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="1028af498a1331fcd7eafb6efbe92e9464de808b40f6e62ecf29c539ef38f28e" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="2641ba00d49684ee5a574184582f01479e0443eaada1fe99ef19b56f4d808e40" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="d0946b55e54c6d08e543d8dab38e807a9c8eb42e6eb981a26129e492225b03bf" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="90e7cf4aea2b396e9e8137e70a2faddf6cb4f20fc540c95e90e4b6ab2f1a1765" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="f63c6b141a304b1931f7eaecf74ff056c25897a0f57ddf811b281ed5111de998" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="e667e47616f8026787583c3deeff411c052fb99195f0784b7d24054719373c11" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="0227b7f0918ddeb7b58341cf137964a7c6bffc2568d022949464a32c6005fc7e" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="b8eff4c6068b330541d570046686bff9bd29039b0d79e9cfd6a1e67e3882e381" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="aa98ceddfb43560cf343c5c95ad9ca267e033e14517eaa8b7ae27f902b61ff91" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="6cc4b83153a4e534f8bdfdc8b72e5958a5704a6330b4327468a00873b0bf558e" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="d883ea53282651f3ce612b54629971984374096e729c0fbcc823795ba63349ae" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="cc1e6c05e21cafeb059ec7861799903a1553cfd3b15a58ea1090e3a26ae4128f" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="a41a0d79e92aea6ac23b3788c06663dbdbfc8b5d17fdf89462f7e5db6c3a476b" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="f123f3a6d93ae2badfccc541bf051a85988b078b00f882f71065da6b356ea0b2" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="4b81cc40df8154c236608bc0d2404d89f8d34f95ef1c274a7da79d6dd658962a" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="92d9e78538e195e434decf7b8437a5ec57bbc2b47eb0f9f25ff864d763f88226" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="5cc40b6e2f6fcb35c8a6e43d8b9f1f3d437b41f87747abe39a2af3e59d7fcbc5" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="f46aec40ccd7a1ac9e21470d97808c0420840c7c2578429e93f350287aaa3a39" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="1d2709623955e1efb9a6932a9d809228db347e347046f6f0b9b06c6edfbf19be" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="0d9f2ed15719bc3ab6176e45d9ec7b74139a3d917ec5a149c74522b45285a107" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="3d84bd7b480d2e57fc7f5dc2e4f19f9d60629dc1d56d7fc22f575c63b18211ab" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="1d436c5b5b3cc4c0de437eb11c67d3f8e7af0a5ebe514f7bc919c2d85e0bf014" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="4777a2587690d13e4b236215be53c29022292da1400837e594f3adec1657b8da" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="de23baf2ffeedaabbb517e66924a1994cd1de88f349272200ee83ec208774fc9" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="cff4114272937cef625ed7d32fd740e3861ccb849fab2bb11fad61afa9ccce54" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="27fa606762c1ed303632f00d2a9e6f6cb400805149f9e51c6bb824c8ef22b7ca" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="45026847c0f8a501245d7aa206c9d626849ea9f97f640c43864ef94f9abaa2db" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="75502ed338570828301e2936080d88f1792fc1b76d15b9828e19a1f139368819" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="0300b1668a9410437d98b0a7c32437e503ce13486a6394f5f3b8f615da5b9898" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="8f5512b3deb4a6d0746e9b0a40c4be0dcd180b165606ec9f016f670acf8b1d66" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="9e02732f1b19c207fa65183ca1e14c43e140758c5bb7cadf237d71216da7a108" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="73ad8c3b5abceba77af9b1313c9102a580e5097b8073b5260fcd055bdbb4d2ba" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="7411b107d9bf9d79ae2376dbbfe6a7daec4dc60ebf62d4ca92199c71d5da1bea" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="9e3a79d4f70409ccc70a99d4317cfa72724f6949376f5eef4bdd384696b8d86e" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="b680170e32bdfa1032db8576e653a4b6ad43e3c0be81e8db7d8f0ff6c77956de" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="389ff7dc171965fa7a05c5e530ad9ffc0a6f302e573a9272a52b78ce12bc44ef" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="e21f786ba4dda2834d48505036bdd558749268c78587d0c711e2b2bcb0659500" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="22299263684dfac0aa8c72db6fe16175cac0d436c90d6215314414f8722bbcc1" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="34d4c7a14aa8fffb08c8802c7abf8116e2047b7067a038effa251fe6fcd04cb4" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="110905e19365060b31b23e440db5bde21648424ce603722e17714aac87fe8724" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="7b6613e286e96e5452e4c94b2139fb962557c74040effca6af2591214612db49" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="03dff9c095d31e6262f81e135d335f26056939e00cc38c0ef35c28943134fb10" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="006c3bbda79cd338eef95f7d3ecee106b49ae86d298a8cdda6d66f7766188be1" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="bde522d78804b9cc84456a425897fb2d1b4e559a0975927de24cc1c9f2273e9a" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="df0ef4cbc01e1d28e7ceb8946bb698177396752e8ba913c498914d48d6d0c2a2" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="1a6605f4d425a3b4291567b1bf62a870072a315b293b298d935d645fab22ca7a" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="a45fef63a5fc407f990babd4a9f909a1c3679c0d0668cf93b426d58de035fd7a" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="af3b402312c9764ff416fb674d410677280b7a56177b09c4de2f7523725014ee" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="85caf8bd590873fda4140d9442c18f9d5b66877fb87a524348c060cc463f5c07" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="88cab80076a1f8958ffff4dc464ad2cd815c101e3716c34ebff91f2e38fd545e" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="5c9b3bc74eed568ae34d7ce3130ec4ffe91f980a2c55cfbe369402b132d1664d" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="0e41da2371cf3dea3e526f8c9ce188872701fc439759b1b65a1305347111f23c" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="dedf2bbcf8c2fa4fa0a1bb0ac5efbfdcf8dffe399e2bc59100295c70f151c5d5" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="949152cf9cd65682e033d66159ec67695411759c96af9995850e0097ce3f694b" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="2543474ebd4a067e22748e1c3fe8c2597d13bfed519351de080e76001b1861c8" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="80e19e885c72aa2dd2eca5b52c4d3e2ef906ad052d63f5da1310d167d5e25cb4" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="25e30a8b79b4e73a167cf981e5964ed2c6c0b92e85b265aafe5c937a2c55ed8c" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="6d1043309be2df1ebf337aa8f10960664e96bfc33022fee24b31dae43322d960" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="2c3566a4b005e9ec152c40113412ae395df1811c54e394a5e19159a832ce3170" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="da1b9b336a0dca25f9b623d0bf5c8f1fe0c68d66b3d9ee8be785837511d285ce" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="492285e3e5e7b4c110acc1d45eafc67533453c229a1a49e164f81d6506324ac8" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="e80f5e2a7fc0130f04b623655611d485f9b4f05fbdaee9c3826b567e71faab89" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="3f73f067b03a4b6ece8b677d2d79bc3eb4a3bb1223a293a9fde27a623ded6170" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="438e2a8266df3ad816c9784b7586f7f287588d53440e26657c9246374256edb1" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="a5c07afbb40a59427fb7ee5a6dd18285a9c5be7b4ecb725170f0a4110f53f894" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="3d82b0a353399eb58582872b87f770c53b84fa26e75e4d4898a4230dc80b4d0a" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="673bcd6094a86148ca6b01094de81ac7d4661ac41f75af7b4e5b36e403bf756e" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="82217a4425b51a500adc17f8256a4407654380d191ca9c9802fc9937431d2021" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="5fbcd7940a26ab3b24c6068fb03ebd4d95d3feb2a80162f2f26dd4477a20c00a" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="5ae5e8eb76724469ce84606018cbf73ef329157062b528f836ffac3c11e4d250" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="9c995ae28b011ebc3982b85586e9fcca2fddb9edc9efcfc13eee2170b9d0e30f" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="7d3c8d346497c31f0b35917d2444646ebdd015906974c2aa38a79ded6391ce01" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="3d9c6d191c6acf00f8c866724ea7fd40d7e1812b43c208f645eb71f71a8bff01" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="993677454468ee6c81d0f59fc54243652e567b917ba2f8d56f802a8f3a1bdaf2" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="c07ec8436424db50f869498f8b4f198b960554f0a5506c43ba0b24c644e51e03" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="529044168e3deb5215efe628d9cbb8f2b6ac5350f21674d3ce684fcafbc79027" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="c02f10843e380bcbe1c862d0615903e8334a751394c86b7ec8506de0448fa167" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="5c572989247a739bfb4c1e1c696e26da31946d260ef83d8bd2cdcabc1a6286d7" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="1bf41279132513bbbef4f8dcbf20e48aad4562ab66109893a849256d02711c90" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="0d847064526f13ad5d425c921d2ce51bfd2db056f9b04545a1a5e550408f7900" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="3ff9978847e346186a423103981f3e9d35ee2ea4ea25751b9ee5646e0aba16bd" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="92f5eec9476c592be5ad86462b6753f5bad390d4f99b4af9fce1ea222fe95803" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="df2fcc2380d08d8367742278f03f871d89228a8016be54f5d72143071bd37f9c" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="7e7141f5f2c4faf34b668c51e65009cac7b3eca1f48de678493d21d3c389493e" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="d09269addf95e597b733cfa0a69a3caad9b91f523e5a647046cb8b8f642347f6" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="84de3f67e3162940cb0181995b2bdf749f9710e1bb3b11f95b5c1d01fd53a0fc" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="71d873764bfdda6ddbe81e1eab178566e798859b0b4438a90ccfe5a92080a24f" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="7ad666c1d30cde0c5fda58dc61d7f6cbb5d1291a1e1e6fc4c74430a3f2f80d4d" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="a27c3bb06d5270830d06e5bb5d1e58984cfd673f4d16571615f08724173066d1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="ff0edced479ec0af8bb62e1763b13f6f73db40d209380d047a879194111c5283" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="476b24458a4fdd226e58f51499a9ad759a2fed8842456dc7ae5376a887b0994b" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="743357f875dd7b54e919c0d1f640d2d6ed5538005aecdab87ed46ada4fc3a799" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="1a16f2cfccf9c50aaca9df64d695c46f272add5c14f60470b5dbae35e6e71793" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="43d268b720b94f38c67d16d322a8f73ef288499ec493efdae4150449143cdd5a" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="5d1daff65239f75d884613e360eeebf45f344ee7ef02717815228580875e31b2" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="725207bd2f61aed8bcd5cb43ee1d73636351600472cf363de693dc3150b31dba" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="99e497aa288b0d3c35a35f5441b8990fe7ecebf50a329f2bbf197513d99d63a6" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="66fff78375f21816f4ec47456af73e1805ae389aff1caefe81316774208105a0" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="970c67dfe2532a4a21011a6f53824eedd7e1bd6f83f7f3d70b0ffecb160189ce" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="cd4eab2c05b356714c2c180b61f0d86dee73c6fd066fbaa354cab8b41e8e4824" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="629f4b0fd718d3270ae61062d70d7ca4e40a8301ff5f29d6dbc45bd7b5fc916c" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="bea12e1f4798326e8adc41f0cef53348db961eb44b72307f7314ded1c9087d13" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="6c82361cdb6168022f1ac3a803ef06e74d92b737aac01ad240cda1695e049ff3" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="01ca449ce4232fffd45cd673298d785bdedddec13e8b5efa73bb913a0e2dc0f6" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="3763efd6cce023c7fe77a72410b1cad4c2491409377173c3d1f09331f33ffd3c" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="6203779de16c0a169d01ae066331a28977e751683a6e89e428330a7052873a7f" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="cb77bea48387a64491c9970b7c59763b4dce228aca2016f976779993c8d1fc0b" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="7c4f0cdcc4ce94a762f14fc14e9ed39c59674da8bad2c705c775e615ec71c1a0" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="48b1c8b63c2896ce9a39d970f3416168c7ffd7dfa7ed8deef08cbcb81e0ea3b1" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="6b1a457ff8cd4162bc2d7787953559edc9232828d3f0913d68af6fa15905c920" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="83a80daca829a4cffafa0338cd6a14b44d9285f46027fc93aa3244edee473159" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="3216735108429263742bf2f5ea2ce7b43ab8756bf6f7cfe72f0bd90e5df8897b" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="8ddae70e4fdee2a8d238e9066e81a852a0cff566f4683bae35569cc1decc6b85" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="976614a927024abd6522d9c864329d51b7441595cfcee59b2d5cc4b2da231557" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="f669361177e8fc7835342c887415c988944f9188f65470e157ae3deb7cd96ec5" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="ffee56f37208191997535410b8db84b4caaa72cd6fb946426e058f9f152f5283" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="dbad271d928e9f8fdd5773798e753aaa2acd9d0ec21a57b650c1e3aad4d7b24c" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="c92cf0a9cc74996a830fc427e395377e664c364e3f006a4364fa7c421bad1782" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="914a1139795d4c683953ce676275d45dc281e017ba2c8dda0481e163f8dc7874" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="0de2814af9cb67869cfc44fa165356b4575448aee398570ca346a54709efb9f3" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="f567af367c333cf8f4f2c210bfef637553e6b531ff83768b6491edb10d0fedff" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="620c3785b02995072fb430d7e70863467fa09aceb79fc6e7613b2fd387693052" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="15e7d147cc56b139e0192a82d6e88653c980410f3c892f900ece07c61e015491" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="4a52db15d919469ad644ef25758665b1dd8a60cb2a4038f5d2d4c82e46d95968" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="636b0037fa1fdc793640f1615f0ad45d51fa51e90e7e0d893ddd1e6e337db4e0" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="ebae317a9518ae16bd0612f27eca8246a1416c6bf05b77e776421b431dad39f5" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="afe39d339f4ea2eed5953b44c634c504da5336a2a4847ec57f301ba13e3986e0" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="38eecc77059e89961d4abb9208107d6a0bf272c5a8ce55ad463673eaa9ad841f" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="cfaf3f2b1ca7f872dafa423c43ac70b2ddd4c608acba89b50ac51d33924079c2" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="33cc5a84384188ad444765441df24fd2540f2dc696359f23b474322982e6dddc" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="44fc0f9f5fea857574dada5d754d82d2d361e866b7e55142e4e27d32dcb19858" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="f88a90d6fde9fc02ee382c20dbbbd7ff13b6856a3b072a8e42caa5d93feb16e1" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="b4cf69fb845110e6c02f37eb78b3067f6286736c5859e51ec8820bf63f7d4c26" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="fbb03b7d103f8581378977394d764e5a8f5ab00ea65e014a23e9ce07158a9401" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="5736da1bddce49ff79b8a4b960f99b3d5e07f9d20b7c76062961eaf5bc4306ab" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="498bb6f509bea9b42779d71e91f429d5acebf00ada41741a1fc47d52a3f197bc" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="661cf0778a5f4c28a0b441281f824cc6d7628d35a29abc68b8f68ad66521a08b" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="d749cd819bd938f9bacafb7d8b879fe607d6e78157d89c7f44a4b1c1192d1d66" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="847d9bc4a34585751327b2f406692c1c84ff0681772cb8536fdbe0238bd5437d" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="efdc26b24f161de44aae63da2c1889b61db722c9f15c64b2f6720e1577905057" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="8301913191bd5845dcaf8a5282fb2dc06cdf024007e0060d588fddf1456cd807" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="cf9b51985a9d962bc3dc971235a757635f0988c124680541c47c6f423e93712d" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="99f1ec4b3a89aaacb578778a57cdb7c7e35aed6bdb978e6f13a1645dab4adaff" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="83f8da6bc88718267b22cc35daa37d22ed7d10577a10722965b49cdd0f1f4d1d" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="f1f7a39a33c8661c53f25c0e00f0ced041076047d617ec978e7f64217ec35ef7" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="764261d63e21530e8b1d4fd66384ed97ebba28836bdf0d78d0b1025ef5f1a327" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.372.b07" rel="0.oe2203sp1"/>
  <changelog author="yangjing &lt;yjing@hust.edu.cn&gt; - 1:1.8.0.362.b09-6" date="1682683200">- fix CVE-2023-21967.</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:1.8.0.372-b07.0" date="1683720000">- deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
- deleted 8287109-Distrust-failed-with-CertificateExpired.patch
- deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
- deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
- deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
- deleted fix-CVE-2023-21930.patch
- deleted fix-CVE-2023-21954.patch
- deleted fix-CVE-2023-21967.patch
- modified 8202951-Support-default-jsa.patch
- modified 8204595-add-more-thread-related-system-settings-info.patch
- modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
- modified add-appcds-test-case.patch
- modified fix-log-bug-enhance-aes-hmac-performance.patch
- modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
- add jcmd-mnt-add-start-time-and-end-time.patch                    
- add Fix-localtime_r-not-defined-on-windows.patch                  
- add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
- add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
- upgrade to jdk8u372-b07</changelog>
</package>
<package pkgid="80c0e6e25fce3a5595cc961f83e64095317a8c9e14fc408d5e9cdf7c5b875b4d" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.382.b05" rel="8.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.372-b07.2" date="1688040000">- 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
- 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
- 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
- 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
- 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
- 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
- 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
- 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
- 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
- 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
- 0012-8301187-Memory-leaks-in-OopMapCache.patch
- 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
- 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
- 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
- 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
- 0017-8054889-Compiler-team-s-implementation-task.patch
- 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
- 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
- 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
- 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
- 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
- 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
- 0025-8220166-Performance-regression-in-deserialization.patch
- 0026-8072070-Improve-interpreter-stack-banging.patch
- 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
- 0028-Display-more-information-about-the-codedump-file-pat.patch
- 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
- 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
- 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
- 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
- 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
- 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
- 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
- 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
- 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
- 0040-Print-the-Exception-event-in-more-detail.patch
- 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
- 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
- 0043-Cache-dom-in-xml-transform.patch
- 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
- 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
- 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
- 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
- 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
- 0049-Modify-G1GC-log-information.patch
- 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
- 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
- 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
- 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
- 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
- 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:1.8.0.382-b05.0" date="1690804800">- add Huawei-Print-more-information-when-AbortVMOnException.patch
- deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
- deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified add-missing-test-case.patch
- modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
- add fixing-a-bug-in-the-processing-of-default-attributes.patch
- add enhance-java-heap-oom-err-log.patch
- add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
- del --with-zlib=system
- upgrade to jdk8u382-b05</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.1" date="1691064000">- add Revert-backport-8035986-KerberosKey-algorithm-names-are-not-specified.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.2" date="1692878400">- deleted 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.382-b05.3" date="1692878401">- Init riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
</package>
<package pkgid="d5ac3df46a7ee43573ee4d7e3ca34699496d37cfd2e6319aeea0031eec71d4d0" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.4" date="1692964800">- add 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- fix cve-2022-40433</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.5" date="1693396800">- del 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:1.8.0.382-b05.6" date="1693569600">- removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
</package>
<package pkgid="c96ed603c41f23b49f75ecee0e44c4a6d91d05a1275a4ab6487847aaf5f6c3c6" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.402.b06" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.7" date="1694001600">- del 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.8" date="1694433600">- Fix openjfx bingding issues</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.9" date="1695384000">- add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
- add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
- add Record-the-number-of-processes-to-errlog-file.patch.patch
- add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
- add The-OverWriteOldestGCLog-option-is-added-to-control.patch
- add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
- add add-make-Appcds-jsa-rw-region-deterministic.patch
- add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- add add-8198423-Improve-metaspace-chunk-allocation.patch
- add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
- add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- add add-8170831-ZipFile-implementation-no-longer-caches-.patch
- add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- add add-8226530-test-case-fixed.patch
- add add-8147940-Modify-testcase-this-test-does-not-assum.patch
- add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
- add add-Do-not-collect_class-when-DynamicCDS-dump.patch
- add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
- add add-Adapting-IOException-of-Zip-to-ZipException.patch
- add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
- add add-fix-windows-build-Dynamic-CDS-failure.patch
- add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.382-b05.10" date="1695643200">- del useless code</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.392-b08.0" date="1697803200">- add 8308682-Enhance-AES-performance.patch
- add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
- add Add-metaspace-memory-allocation-failure-validation.patch
- add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
- del 8202952.patch
- del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
- modified Dynamic-CDS-Archive.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase1.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- upgrade to jdk8u392-b08</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.1" date="1698235200">- add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
- add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
- add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
- add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8148470-Metadata-print-routines-should-not-print-to-.patch
- add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
- add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified add-missing-test-case.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.2" date="1698667200">- remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
- remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
- remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
- remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
- remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
- remove add-8226530-test-case-fixed.patch
- remove add-Adapting-IOException-of-Zip-to-ZipException.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.3" date="1698667201">- Add Add-Problemlist.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.392-b08.4" date="1703073600">- Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:1.8.0.402-b06.0" date="1705492800">- modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
- modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified g1gc-numa-aware-Implementation.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- modified 8203699.patch
- add Add-CaptchaTest-and-fix-KAE-Testcases.patch
- add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
- add Add-compiling-option-GS-when-building-windows-JDK.patch
- add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
- add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
- add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
- add 8057967-CallSite-dependency-tracking-scales-devastat.patch
- add 8079205-CallSite-dependency-tracking-is-broken-after.patch</changelog>
</package>
<package pkgid="379b41f8338d2869cbebeb83e628b22ab6a1c0bfd76aed2dd12557dc5163ab96" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="5.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:1.8.0.402-b06.2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
</package>
<package pkgid="a262b81c16a6eefb651627c1b5bddf2302631b173183833f5729cf7a6a85ab21" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.412.b08" rel="6.oe2203sp1"/>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:1.8.0.402-b06.3" date="1710244800">- Init support for arch ppc64le</changelog>
  <changelog author="Benshuai5D &lt;benshuai5d@163.com&gt; - 1:1.8.0.402-b06.4" date="1711800000">- add 8322725-tz-Update-Timezone-Data-to-2023d.patch
- add 8325150-tz-Update-Timezone-Data-to-2024a.patch
- add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
- add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
- add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
- add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
- add GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:1.8.0.402-b06.5" date="1712059200">- add fix-GCC-12-build-jdk8-fastdebug-error.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.0" date="1713441600">- del 8322725-tz-Update-Timezone-Data-to-2023d.patch
- del 8325150-tz-Update-Timezone-Data-to-2024a.patch
- del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified kae-phase2.patch
- modified support-numactl-for-hadoop-yarn.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.412-b08.1" date="1714305600">- add 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; -1:1.8.0.412-b08.2" date="1715083200">- fix LoongArch64-support.patch for prep error</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.412-b08.3" date="1715083201">- add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
- add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.412-b08.4" date="1715774400">- fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
- fix loongson vendor error</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.412-b08.5" date="1716465600">- Fix build on riscv64 in prep stage</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.412-b08.6" date="1718798400">- Fix aarch64 runtime thread signal transfer bug</changelog>
</package>
<package pkgid="632949dbcccdf61e381811401b285d21bf79ca12b9e21e6d3be746bc2a113161" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp1"/>
</package>
<package pkgid="06c0e0b6326fdad8251d9d7aa4870a6fc9780198e4658e7d6b2e8d8a90d2e7af" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp1"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="dd34d2c3dfecab64da493af03f9bf217e9f92b05985bc36058ab97ad4f2e28b4" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="83209062cbff9c0c293ad58a9169910a4151ed9fab8107e76a449b3d64751778" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="423d8808c77bdee1a58250ca6e54e142c393d2f0b686ff1df22c93fe9b043a42" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="b0b96108832e98fedacfbc813c284347edc59ecf3f41b9e85002f4a7639ea9d1" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="7e02a661b21ce32a8050666d52eaaa177cf2f0f14f4fbba8a2ce6c471131863c" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="35ef6b2ef60fa5cbdcdf3829a2edbc6a1e83a5ce94ebf9cffddef826d69a5316" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="17da62db5c070816a5b376b7a18b739eb8586a64ea4572b64f1404303a29de88" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="b72cf45dba1c82505e2b3b07a07d5c376490522617dfbedbe7977c07cfc39a33" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="b3f68a68db999f5ed658e77c727a3ee7da6410065bc859ce550ac30851465bf7" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="4bbaed5bd90347b545dc2ed54501f7bd7b01581427ba002ce9ab43274ef00b04" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="2dcfa553bd71e49c3c99b08278570978c365ea1631a8803fc7c626b79a01dcd3" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="b9d33dad675010e7e562977bf2dba18fb9a2d1795bbd9218b27f4698b1923ce7" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="ee82e7d4d3dea561e4ed2ce259db95508867c0983307da5bbdde02c69b2c3e8a" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="d77c8b3502793bb4346bbe046ec9105f36f3f5feb7eddd2b458ce9d34b583ac0" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="0d5cbed1e979640dcaa0ce9b621cfb1846248f1a833d7f30251e29e7c2f104e2" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="630351c2c35b1ab5b2cf639bfa4f0ffd111b6f410209f0111dc8cb5de6fe6bfb" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="51f47cfbc5c1d6027cfe29f87bf78ef402bf2afaf67edddbbc8123c163f1bd66" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="5b4ef1275f574ee8c69cfbab2a8e1894d891fdfa82aaf7913b337fc0f9879edd" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="2c4628d5c3de9a9dd6355c1974b1b0611dda613a23b834ea268c2b232babb148" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="4aaba07b9e60c146ed0b7d019fda12847a25e0ac5e4c41996f0993e89e7c8f77" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="a0a12575a403aec2c16fdc0ea2a654966ad6cf47eb3bfa06aeef393b64526762" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="3dbe6ad79033afa11ae8c3c0e8e7118d2d8877b2d9f745254f3a41d40ff8058c" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="f66e62acf79c2b48d0cee00082bef009fea3935c08dc792e0b8797f921abf35a" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="6671cf26df56246378655d113a9fba3ad0cffc5105afb032b510d636499b16d9" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="20d02b009f61a07961c034c420dda3eab7779e70adf3c33c898c9bedf9c09261" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="3c09a002c2219a8620814a9a8087efd1317922ef272105f1a1a8d40d77edb749" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="575d827e9fbc92f40943873ec89b3911a032f42acfc724386b93908f120d7f9b" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="ac62f3e72bb86ff133751b4cb6743064905e230787b8e90e537213cdb5076c19" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="caf8672254dfcd4a9a4947aa02c3a715ca37cf0ba73eaee5232eaacde1f67c44" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="7d3c8fa260634187c5c22124882667e077ada2c28ed48843805f20162506148e" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="25ad722383205bcb9a74e1a8896535ce58a22dcad56e0065e016512e69532d6d" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="2e5cc5439b7de35ad9605f990c75cfa0d3ca3d0b05144d643914c742dee01ab0" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="b3499ec5c018deb2aefda587811b0018a014503d83ce4b522a316a83abd75e26" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="6e2da11d8500beee329ef7d3f934f3512d91c55aff9cb2fdc95bc2d4ca9f91d4" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="5ec77bd54009daa9e03855a2b29a7e5e6cd202e47b732c1649d58c80418abcf1" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="2a8b10e4f1bc567c07548f31dd1ce05f0b1339a4ed5772e55403f92d504b41f5" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="3efe0b25f13dbe6d894056fa1a68165b51d8e405c0fd800d229d8f35961f4fb0" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="a957dab99c1c0b9930b18870f9124e4e1afacab5b2e7aec44adf3e44c2c980a8" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="a1caf20e4f5034933fc54fb6ba4d2a853023c567bd986a5224cfa55daf50365a" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="fb6f1749c69e78fa295521817bc222293128c619b95dfd25fe1c8b5a49ee265d" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="56896337d908ed6dd87c7ff9ce917340089cd6fce2903da290138fb6c1ee56ab" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="65d6b3a2e37c8da668e297dbf12e00566f432be48c6dc9eda4716bac5c8a6c89" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="cb5f0c92bd305ba4d6f48c953db0d0ea9de6c74801df578820ca9ec13373193e" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="0fb3c0054865a78970286a9a8c6bdd4a2e434fdebb402c80ad519ad718d3e5a7" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="d2ba6860a4314a82da6a8204083df9f65b72fd3811130e2aff18bb56a98f9594" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="712feb79adc27e6cf14280ba40de52834198d86b7443cefbb1e5d4e87854fc3c" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="3ea0084ea543ddb4d1f3fca05dfdee64729a5062ade1db01abad4b3a95094fb9" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="5629ea5cb605e6dd02ff281458d3e980aeee05691110ee20645d0d2b3a62699a" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="ec17e4d83c2e5e1cf7fca668e5697db978b3d1e3d994d6f61180ce5f075dcee0" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="faf4c72bc18374ff7aa24cc95bc36520ecf3f2c645b4e64ebb3a78792d53a891" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="856484260441999a9a4ad58ecbbf21e64fd87ca44567858b22156e88693ddcd1" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="6b86928e7ff440cac328eaf3ad781488623a9933b3925a65c061a9cdb9a26c39" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="4a7faebd6e0dce74d7bc1ce29e84461d7e70d989cc814dd31905f1c27ee24611" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="03ce6d5d07968062ae30348bcbb9e12714cd9307fe577ea6f15c53a51a7727bf" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="a12d315504fc9c2c3ab3e22aac30575e947141fff2a5f7c0d7f8e8b5c5fcfddc" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="6e5d6e3c4014a5cff9134b103219ccf4214a4e1c8939aa636d750f46eafaa32a" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="e1ee2761b266c70530b08783a66b9faed096301d25f9a36a9f1dad54adff0b76" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="b395126822ece2b04de905f48b8a4628ceb219e50a1c8da9817cf67235fcfdff" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="09bc4d388273151f45faef9fc57eb42c340bdc45c32a082c619faf90ae1af450" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="8938494a15293e25ed20366bf0f77ccd93401fcd82585da97fb225382c3933ff" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="8253488f0d7db427561ecafe6b970c8fca4c113dc56849fd6525499789c122c2" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="4fabb36a418666fef6392151a7980f16cedb7612c1e8f03ace094b6aa22b111d" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="23b26ec3977e47a6b8c5bdd271218e4c7b2dc3b7b50c169827c108669dc4db93" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="1c04254d305fd69b7ce50ad2f0e0166a9ac20da49ee3b1c8a4740d154fcd799e" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="aed882108564d71294b3af5d3c9d99a4bb5f1048def11dbbd59573048822d24e" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="dc4564c7aff2a7cc7be854d495835234bf54d8ec51edb5f403a2e84a333a0dfb" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="40fd077c0c10ffb9de04730c1175b71be5af1e6aadbe622cd5d6ddad862af423" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="4ec3a6c69504bbb9c488774ab19d84045b43942e775fe5c924a7b9ae2e10e1d1" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="94577223fe18d1c0388ae1a8d6340502d12ab5c5f2f6235b1fedd36b4579a934" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="2924d86a4e2c700aec3bf8a16eda1e97bf7cd0878b2149b74f3438a1c4b58fe7" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="7433c9819a02d6241bb6bf2ca4a8f24b1fe2f31e96f8c81450544a7cedb51c42" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="cf80f1eb071985a8db60f6becd4e6d434d61ef076585c820e1a1430699b14de8" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="e2212dafd787021b1338d11e3ef37f67ba072a7177d6f0161026c31982a47841" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="81b4ac1f17106011a1441967188f2ad5fef955ceabf97b3cdeb7954643b159d1" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="2a34878dec1dbd3fd4ffbdb2ff40958a21968297e9687b4147ea16fe07d905d3" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="3bd4c0cad6732f38c1e24e4aca34307b76324c59d638fd9b8f9b32daa647434d" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="cd4ed3a938f001acbab9577df7560e6a693641cf5ed372a68a568414206db381" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="8b91fe8d06e812fecea3b4fa9bd1f1d67e97893ecd7e006af32766de875506fd" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="88c316a07864836b9f3d6d6f6e622abc0ba9419e8dd745aa40c2df556b7f8a56" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="8ecd46e938c648cfa55caeb1c4abb63c66813bd352ce6e13b8f374c244d7fde8" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="ca79860eb8fbfc9767a893de0da9c5dde3ffdb21973df43247e907b61c36a2f9" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="8871e9d8ba6c5520d58e65f293231bcd42d91e348ecd753b0acf6433af74efee" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="488aebf1d4d37f986dc9918ae9c5b801eaad9927433d53ee5ef76aae3ca3209b" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="7cbd518684db91e103955de564395f98544775cde741dade383c916411fa56ee" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="489b4ef3ce27cb29fee0e0578724f68a68b105399a37c75796dd3a76a9bcbc43" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="808e02b97f6b8f887e3caafc446c8fbd35381df9af4a26ba387b485b3357c573" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="0a2963f13f25594f9c6253979ece82ba9a70b13c655832f0f30cf496b8c96078" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="a22bbcc8927542eafd7dc4edd588a1cd95ced1a4d429fae9d97decab2b4e78f8" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="d79d7337fd64b04b0bb34899aa990dc40e2435163adfd15298ba257b6180464a" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="5e32346843dc91085da009cd20c5c3831b2770adf29b2f64fce8d0cbd053f40f" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="b2e6a063e5ef056205a73fd7dba1070d8acbc01a4f7dc3954ffb183eec9f704a" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="224b4b93919b526253244904967ffdf20ae3912b3fb4c22f7bd5b5b628e0f1dc" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="ba981303eed0b6f8fab42ccf918bffe1f89b3f5166a40a3856a4591ba6763244" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="f69587d7067fa3e8491a44f6f452860d2333aa1d6436e04b251d786910a1e616" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="4c1d3bdd8e7b2b9c8e5a5d9fc1f3172bd5f4f312e2d4c9becdd6095be078d651" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="ab54ed411854e029f8112d17ecf346786981bc3c0371fa93fb8e60d80859e6eb" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="8facd73da33148731c32265f7ef77da01ea234b84b263dc91285912caffd8eb8" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="28d1869ade0d3b003ed5bee2bb22bfad057bcc0d9636dcfe3482c6071d2c1f93" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="8376f0de5ea8b9411b11b246acdb3f9a7310a343f398510b2342803010bd634b" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="3d9ca76dd705b2c3f9024a25740066147e1a8a3941803cd500c6d623855da57b" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="02c17dec77f567e5384fbdfef4795690ce271b1357a3e4024be2e999039617c2" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="7789605c6c89a5a5ce35cd09652401e28318c13d7a54634473e5dd51da476788" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="380bf1f6b830c8221ce22509a1a42789e917beb0cbeaafc86bfff81f2e7bafda" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="d9de860cb1cd06f1930f885d40db979ccbbc3e4d04a6c4398f15e785b022a171" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="d605bc3e79526898edbffadaecb194dc2fd7c3bd5f4b414ac4b8637507d1d842" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="329c839c66c1f97a3aacea7073102d66810f02488a039ae7c3ccf7732af4945b" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.19.7" rel="3.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.15.10-1" date="1651147200">- add fix_X509TrustManagerImpl_symantec_distrust.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-0" date="1658836800">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
- modified fast-serializer-jdk11.patch
- modified dfx-enhancement-of-FastSerializer.patch
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
- modified add-missing-inline.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- delete fix_X509TrustManagerImpl_symantec_distrust.patch
- add fix_Internal_and_external_code_inconsistency.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:11.0.16.8-1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.6-0" date="1663588800">- update to 11.0.17+5
- modified NUMA-Aware-Implementation-humongous-region.patch
- modified Add-KAE-implementation.patch
- modified fast-serializer-jdk11.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.17.8-0" date="1666180800">- update to 11.0.17+8(GA)
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.18.10-0" date="1672920000">- update to 11.0.18+10(GA)
- modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
- delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="Henry_Yang &lt;yangyudong3@huawei.com&gt; - 1:11.0.18.10-1" date="1672920001">- add 8222289-Overhaul-logic-for-reading-writing-constant-pool-entries.patch</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1:11.0.18.10-2" date="1678363200">- fix the issue of %pretrans reporting error.</changelog>
  <changelog author="zhangyuting &lt;m202071389@hust.edu.cn&gt; - 1:11.0.18.10-3" date="1682683200">- fix CVE-2023-21930.</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:11.0.19.7-0" date="1683547200">- update to 11.0.19+7(GA)
- deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
- modified Add-KAE-implementation.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
- modified delete_expired_certificates.patch
- modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
- deleted fix-CVE-2023-21930.patch</changelog>
</package>
<package pkgid="a6ccbd6bdac9e3f4a3f75a5cb64ea3a0fe36c2acc3020c5c937d108d54b40982" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.20.8" rel="2.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
</package>
<package pkgid="089d7ef2f60c609ff798f7598a7286f1528a269d2b312d6dff0b5d41c7aa0a43" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.21.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
</package>
<package pkgid="81c7c6b0bf452c13f3f1dacd6a02be70c9c7721151149821801c8cb41d6597cf" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.22.7" rel="0.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.20.8-2" date="1692273600">- Add riscv64 support (based on bishengjdk riscv branch)</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-0" date="1697716800">- update to 11.0.21+9(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
- modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
- modified 8214527-AArch64-ZGC-for-Aarch64.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.21.9-1" date="1698062400">- add 8295068-SSLEngine-throws-NPE-parsing-Certificate.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:11.0.22.7-0" date="1705492800">- update to 11.0.22+7(GA)
- modified delete_expired_certificates.patch
- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="3293d75fa8cf88740dc2c3b03c180c19cbda401b86f6cca49a6259b34ba7ad39" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.23.9" rel="2.oe2203sp1"/>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:11.0.22.7-1" date="1708430400">- init support of LoongArch64</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:11.0.22.7-2" date="1708948800">- Fix build on riscv64</changelog>
  <changelog author="jiahua.yu &lt;jiahua.yu@shingroup.cn&gt; - 1:11.0.22.7-3" date="1710331200">- init support for arch ppc64le</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1713441600">- modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
- modified delete_expired_certificates.patch</changelog>
  <changelog author="huangjie &lt;huangjie150@huawei.com&gt; - 1:11.0.23.9-0" date="1714392000">- modified delete_expired_certificates.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:11.0.23.9-1" date="1714996800">- recompress the source0</changelog>
</package>
<package pkgid="3f64fbef2aa69c57a036bc5f748b19e0b04b0b3d18a99109ad42038e51376147" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp1"/>
</package>
<package pkgid="e1cadec63cc3f91aaa815411e945b38a87bfc22268fcf0d90a6c71ca28c84225" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="1.oe2203sp1"/>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
</package>
<package pkgid="3b508a920824c29a3bf91bb6ef46f1fcfff47adf71a284fb7d2801fcaae1450a" name="java-17-openjdk" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="ee94731ddc102cd41eb417fa6206d964dc329f54ffc8cee7534921515d11bcc1" name="java-17-openjdk" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="a7b1c762f175428e2f9714e2135a7d4f47a47af67288c828ea101606bf033ce0" name="java-17-openjdk" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="83de0299416551d6ce2cded28f75064747a4a803611457addc83d4182211f53d" name="java-17-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="7ee265e538570293208023b438ce934380b8c59dafd958e7ee4d4001f719be20" name="java-17-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="8521183267d01dabc132b493392c78e737449189234dd393c1ce0f8790e2fbbb" name="java-17-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="171da7775213256e2bba65e1fed88886f5339715d8d79fc3ce88de2e61d6a154" name="java-17-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="097e10aa16a211467d3ede5e4c5e8da0e474cc541204839c6b142b8ba0456d6c" name="java-17-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="45a26aa59ae95dab9222be914cf915a7625e85142213c093b183f49123df6f99" name="java-17-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="767701c79ef225eac635a4b59b1b44d18d4ee9748ab374c48319d10ec716f60d" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="99512a92b2c7196a27f9ebf1d7d5b3062c95d316e605cc294e0fdcd938f95ac7" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="896f8c47b465ad40d0635174ea9199d46cca6dc7444c2a424d3c86e9eb3487ff" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="ba990c0da5d17a4906a9e6eb1575055051d1ae4d2e6e672fb7cac5036e78d919" name="java-17-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="829d5a73d8f711b8711a19176b15be90b69f0a9995a21be8ef0aee359c27d966" name="java-17-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="2aea2529811b14f3b8bf9c5e5c1d25221f977cf3806949fecfe3ccd2b4814686" name="java-17-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="965a0fe7fde2a6f613130e4f202b240d488f44e93af9deae565cb184f81f9d1a" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="2bc4f36206a17a6e4128ac69d4f2d44143e17498181d87cccebb82754e5bcf8f" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="d5538680d4564c9bdbaba34501527d96cb5efd6c6f0a7bc2ea703a8ee7d7ad7f" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="4c44858b931ce31785d9a6545a8ce7ebd62f812eb619de86698155efc574c0ed" name="java-17-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="fa1f35914e0bf5ad8b892661cef4666c61e01a0632598d75316f3e775b0461dd" name="java-17-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="b21ba913c594eab4f722fd41c7da6090167bbb29d4723c3af10c4cc35497c307" name="java-17-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="95b98d16fbcdf7786e9f656dd1a5baa5b5d646c7d3fb4466ab0267b89339bac0" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="9abfdeff0ce2d5efa5ef3a335f0e3c76deed77d215c72508a1c139e2bd4e0367" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="164f2fd20ad116159033141bfd29287746189dbc11a5c04c0ad979a0975334c1" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="98417aadca9b881762f503e39bd39a0a28f2c4b8217f7fa9f5afdb9b266df32c" name="java-17-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="e05317f79487378c29a50d9c7088f014e063b890f4f0572bbdfa68fef1ce7c40" name="java-17-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="a7deb196589bcaa8eda8e5782120105bbae581812bdb770a2dcb3e867a2e65b0" name="java-17-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="b911399e9cea6875d22a30860dc0a2fa6761b7f7696fa87a9026abd2287f3d4a" name="java-17-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="b82f875391f7104baf6e90d5d8855905088277be5fa2d8a6136c17136a1045a1" name="java-17-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="e66fb0063d64f6c765f7a9e895afaa621b1e4546f0fcfb90888194a93905d62e" name="java-17-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="6e0352a462f1251fa71c0def51533be2337b5604ce22934c6c75bd74c09a826c" name="java-17-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="2ad0e6dc5eeb1b7c451122fca2ccb0fd32c28e915577fa4fd087ea1db8379851" name="java-17-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="4750fb37b5f9611a0baef6f1bd65cf3b75a22c4aa8d8c56b645d1f15a919eb29" name="java-17-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="bdf4e2e1d002abc514e808fa3b6b2349f08b836d1d89f8e4e13110aab67ecf98" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="e1b8283e65ff34496da55c5b41ca171b8a05c130ee692b1e3fab581bfa5eaa24" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="c0b90711bbfb4b4250a472aa0456fdb194029f9f0ca8887188895185fb6310ee" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="37de17215b261742bf3d53dbc31c023c7c92b8793a73f73fecf8f2a649a977b4" name="java-17-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="d6dc17c4eb16bec73bcdae7adf8c09c31031c024c3b05f5d5ff55c58da6197ed" name="java-17-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="d5daa16e6840ecb210fd2aa4f38d140b730711fa565bc886710690c5f04e1804" name="java-17-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="d9638d0375e088bcfade1f5c5a82abe0ac9738a54f7b44071e0d6971b66ad87d" name="java-17-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="5aebea6fa0a74404ffd84985f9f2878c2d3cc7e7cb969f94de80666b465ec577" name="java-17-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="b8479de94acd0126df4479fe9ddab8f26391d75669bd1dd7b7c26acfd787a244" name="java-17-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="3d9b143993d5b31d1fe5c39b5d0a4ff8f27d95a2a9829f282fe16e7c35077ff0" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="4fab0533044208b873faa6c80ef1089740d74cdd60616f8940dcfb26f845062b" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="93c49db0b44fc6384ecf92f03a7efc3b6fa02df62ec88203a9588a2d30877419" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="5863095b463f10c0174f84399fbbcb59b369cd021390f48e296569812014736d" name="java-17-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.11.9" rel="1.oe2203sp1"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.8.7-1" date="1691496000">- Add riscv64 support</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.8.7-2" date="1695643200">- add add-Parallel-Full-gc-mark-stack-draining-should.patch
- add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
- add add-8267185-Add-string-deduplication-support-to.patch
- add add-8292296-Use-multiple-threads-to-process-Par.patch
- add fix-cds-SignedJar_java-test-fails.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-0.rolling" date="1697544000">- fix 8253495-CDS-generates-non-deterministic-outpu.patch
- fix add-8267185-Add-string-deduplication-support-to.patch
- fix add-version-txt.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-1" date="1698321600">- add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- add 8314236-Overflow-in-Collections.rotate.patch
- add 8313626-C2-crash-due-to-unexpected-exception-control.patch
- add 8168469-Memory-leak-in-JceSecurity.patch
- add 8312065-Socket.connect-does-not-timeout-when-profili.patch
- add 8285516-clearPassword-should-be-called-in-a-finally-.patch
- add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
</package>
<package pkgid="6d66ecc80b2cb40bf8a68ef7631f1f4fa9e388de5007476e5b0e260efeabdf7d" name="java-17-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="e95ad8d4f6cd124defb3e9b87428c2734cc1200b22f946e51b68913bd2827602" name="java-17-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.7.7" rel="1.oe2203sp1"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.1" date="1659700800">- add 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.2" date="1659700801">- del pr3183-rh1340845-support_system_crypto_policy.patch
- del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
- del rh1648644-java_access_bridge_privileged_security.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.4.8-0.3" date="1663243200">- add Apply-TBI-to-ZGC-of-JDK17.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.5.8-0.rolling" date="1666180800">- modified add-version-txt.patch
- add jdk17.0.5-ga</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.5.8-0.1" date="1672920000">- add 8253495-CDS-generates-non-deterministic-outpu.patch
- add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- add 8296485-BuildEEBasicConstraints.java-test-fai.patch
- add Fast-Serializer.patch
- add Apply-TBI-barrier-patch-to-C1.patch
- add Add-Fast-serializer-testcase.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.6.9-0.rolling" date="1674907200">- modified add-version-txt.patch
- del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
- del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
- del 8296485-BuildEEBasicConstraints.java-test-fai.patch
- del Add-Fast-serializer-testcase.patch
- add jdk17.0.6-ga</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.1" date="1679572800">- del --whth-lcms=system</changelog>
  <changelog author="crash888 &lt;wangmengqi13@huawei.com&gt; - 1:17.0.6.9-0.2" date="1679918400">- add libstdc++-static and del --with-static++lib=dynamic</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.7.7-0.rolling" date="1683201600">- add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- modified add-version-txt.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified Delete-expired-certificate.patch
- modified Apply-TBI-to-ZGC-of-JDK17.patch
- add jdk17.0.7-ga</changelog>
  <changelog author="wanghao_hw &lt;wanghao564@huawei.com&gt; - 1:17.0.7.7-0.1" date="1685448000">- add 8280872-Reorder-code-cache-segments-to-improv.patch</changelog>
</package>
<package pkgid="93b299c283512fa7342f85e5c079ce71f703798e063263cb4eedef211212e5f4" name="java-latest-openjdk" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="907cd1eada1f451889dda65084f1d7da4a827ceb74f7114b5fe6f5531dc3a16d" name="java-latest-openjdk" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="3388708d05b519cf65ea2f5b94e5d7e4a3f8b695b9d3a8f2a34f24f612b506fc" name="java-latest-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="1b4e4e13254710faa304af218d61372d753284b756462702b5a9606eda0924c8" name="java-latest-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="d2207afea183b74fe81efab9105fe592df4e50e811546c2872a3b52454b46a9f" name="java-latest-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="ee3051c4c17ddedfa8d43ef1b7cb81199f0592db6f9fc7f4a40aad30a72cb762" name="java-latest-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="e9fdd55240ab695b23359c5aa4be58e58237016e490bbb27dd6e72f4986699d5" name="java-latest-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="c0dcaeefe4f70998d1bfd0fef97e5bddfc2df8a3ebe5953b4b2ccc49828a4773" name="java-latest-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="fb650de98eedc5bea848081c5cf18dd915e93026b63801208366b6e18493bbdd" name="java-latest-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="8f14287167c3ef17abc47e6f9be0a2bec07e8e4fcf9ed9a644d6e12ca2f2a09d" name="java-latest-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="e67e1680e0090a91eb531faeeb8780343cf089f74cdde67e24c01112e08c5ba3" name="java-latest-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="7f40e6e974f916c46b8f5816449036c9d092e7842db67736b083caa632228edd" name="java-latest-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="965bb96afa6164936d56b6e8049774f858343fda1ae907d89d2e82faf1c21af0" name="java-latest-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="f5926d7c4a822990d9308e5363bdd384e888651f4080943108daf2cde7c9d158" name="java-latest-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="6731cbbf17fc9e418f721e3268451032a80b7c714f7d4a5a5173a5770ec5725d" name="java-latest-openjdk-src" arch="aarch64">
  <version epoch="1" ver="20.0.2.9" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling" date="1691409600">- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="083a2510b5d5355183e9f4f294e479206884043107d7377bea0a724dc2111e3a" name="java-latest-openjdk-src" arch="aarch64">
  <version epoch="1" ver="21.0.0.35" rel="1.rolling.oe2203sp1"/>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-0.0.ea.rolling" date="1650974400">- Update to jdk-18.0.0.0+37
- adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.0.37-1.rolling" date="1651752000">- set build jdk to 18</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.1.10-0-rolling" date="1651924800">- Update to jdk-18.0.1+10</changelog>
  <changelog author="noah &lt;hedongbo@huawei.com&gt; - 1:18.0.2.9-0-rolling" date="1658836800">- Update to jdk-18.0.2+9</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:19.0.0.36-0.0.ea.rolling" date="1666872000">- Update to jdk-19.0.0.0+36
- Remove references to sample directory removed by JDK-8284999
- Need to include the '.S' suffix in debuginfo checks after JDK-8284661</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.0.36-1.rolling" date="1667390400">- set build jdk to 19</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:19.0.2.7-0-rolling" date="1675252800">- Update to jdk-19.0.2+7</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.1.9-0-rolling" date="1683201600">- Update to jdk-20.0.1+9
- remove pr3183-rh1340845-support_system_crypto_policy.patch</changelog>
  <changelog author="wanghao &lt;wanghao564@huawei.com&gt; - 1:20.0.2.9-0-rolling" date="1691064000">- Update to jdk-20.0.2+9</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:21.0.0.35-0-rolling" date="1696680000">* Mon Aug 07 2023 misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:20.0.2.9-1-rolling
- Add riscv64 to jit_arches</changelog>
</package>
<package pkgid="be57b8dcdf5352bb5c8a5b5309993064609abdc3683f7795091e6f28a86a5e13" name="jbig2dec" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="4c635d9cd4919dd0ec917beaf23b27160bb8c21f9dc72215be30303dcd71891b" name="jbig2dec-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="59b26c2ed69ef97896e285179d341e33214a97fe252086ec8aaeb17593b5b98b" name="jbig2dec-debugsource" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="a02aa8e87dd378682de249629d6a8dcf2a39ed68f0e551b86ba8cbe8d08a6103" name="jbig2dec-devel" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="9c6cb5f176667ed8943889c43237a7da511106368202fcb90a9de890d2bfb150" name="jbig2dec-help" arch="noarch">
  <version epoch="0" ver="0.19" rel="5.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="c919e0882d14a586d68db7b306400f8fed1f02ac2db2a567cb4d1bf013e1aa60" name="jemalloc" arch="aarch64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="477f2c363b7accd08e3c7a1860cc2fe017e3ec5e177fcc37d34c0a76a99425f5" name="jemalloc-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="2515a4b44d606c490b59ac0f11b5881ae706de979df8adc0b70febd8f1d96df5" name="jemalloc-debugsource" arch="aarch64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="2f09c582e068b356d3fb738ad82d3022afdc3ca13dd4dbb38f6c75ff942b9295" name="jemalloc-devel" arch="aarch64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="64dff67fb9ed611408b5c8827fdd4ec882b3143779f7172eed3b9788a7974f9e" name="jemalloc-help" arch="aarch64">
  <version epoch="0" ver="5.3.0" rel="1.oe2203sp1"/>
  <changelog author="wulei &lt;wulei80@huawei.com&gt; - 5.1.0-4" date="1622635200">- fixes failed: no acceptable C compiler found in $PATH</changelog>
  <changelog author="weidong &lt;weidong@uniontech.com&gt; - 5.2.1-1" date="1626782400">- Update jemlloc</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-2" date="1635940800">- Fix large bin index accessed through cache bin descriptor</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-3" date="1637064000">- Fix Undefined Behavior in hash.h</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-4" date="1637064001">- Fix tcaches mutex pre-post fork handling</changelog>
  <changelog author="guominghong &lt;guominghong@huawei.com&gt; - 5.2.1-5" date="1638446400">- Fix spec check</changelog>
  <changelog author="Ge Wang &lt;wangge@h-partner.com&gt; - 5.2.1-6" date="1652184000">- License compliance rectification</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 5.2.1-7" date="1668513600">- add loongarch64 support</changelog>
  <changelog author="mengwenhua &lt;mengwenhua@xfusion.com&gt; - 5.2.1-8" date="1673265600">- Correct tsd layout graph</changelog>
  <changelog author="mawenshuo &lt;mawenshuo1@huawei.com&gt; - 5.3.0-1" date="1678190400">- Upgrade to 5.3.0</changelog>
</package>
<package pkgid="4906711151e4e1eac5bd129bd627f12396ad4bfdb2d04d99f855fd0ae3ec132f" name="jenkins-json-lib" arch="noarch">
  <version epoch="0" ver="2.4" rel="23.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 2.4-23" date="1728302400">- fix: Handle unbalanced comment string for CVE-2024-47855</changelog>
</package>
<package pkgid="c9b7399bdf6d61166958420304e7db7b19f788e205e33f3a352e995db384e41f" name="jersey" arch="noarch">
  <version epoch="0" ver="2.29.1" rel="2.oe2203sp1"/>
  <changelog author="liujing &lt;liujing@xfusion.com&gt; - 2.29.1-2" date="1703592000">- fix CVE-2021-28168</changelog>
</package>
<package pkgid="a37396d48d99aae02b2b8f8eb080b90796f23b220500b1db95571182b2aa69b4" name="jersey-javadoc" arch="noarch">
  <version epoch="0" ver="2.29.1" rel="2.oe2203sp1"/>
  <changelog author="liujing &lt;liujing@xfusion.com&gt; - 2.29.1-2" date="1703592000">- fix CVE-2021-28168</changelog>
</package>
<package pkgid="dc7f8f92c969c448ccebc3e2fbfd2d814bffada2987383f7fc0b2b87e12826c4" name="jersey-test-framework" arch="noarch">
  <version epoch="0" ver="2.29.1" rel="2.oe2203sp1"/>
  <changelog author="liujing &lt;liujing@xfusion.com&gt; - 2.29.1-2" date="1703592000">- fix CVE-2021-28168</changelog>
</package>
<package pkgid="aa707ddc2b7ad008d5f084b9eacd8098e972ebe2fa4ddf382e580d28c956d64a" name="jettison" arch="noarch">
  <version epoch="0" ver="1.5.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.5.4-1" date="1701950400">- Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
  CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436</changelog>
</package>
<package pkgid="4b39cca9aff5343da0ef5233fd7e5d1bfd5da65d233d4d82a8d3db6f41b9f072" name="jettison-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.4" rel="1.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.5.4-1" date="1701950400">- Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
  CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436</changelog>
</package>
<package pkgid="4a0fdd19a5cc84faec54dbed374de2f6d46ae9f35cc93d7e69efd0b314e9a151" name="jetty" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="f85c2cda942fbad5ebe85435fe4224850e6962f063e35617fb536d81574f2fb3" name="jetty" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="bd3497d0cda577cf7b3fc9024d71142fcef6a006f95c075e5e27aa5847322f36" name="jetty" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="52bed04c97d11f6b4fdcc9995eb3c0f1b53c43e2d172447aefb4e97d64fdd0c2" name="jetty-alpn-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="38f00ba134b5944fd755817b94dfd6895031f86d2855cdc14fa9931dfc4a7141" name="jetty-alpn-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="d90872e61e290a64a8cba4de40cdb50897e53bb88059fae8d357619c428a7c3d" name="jetty-alpn-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="f86b1f3df9b5197a7659870c4ed75443b2e113409f53cab27b9011410eebe690" name="jetty-alpn-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="661a59735457ac1e1e803ad9c03ecc76bd140e46a91c2bc70dd769799137ac09" name="jetty-alpn-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="8157ec98d6c5b027c998753f235b16809e9340e47c63c2f4441224b7eb6e3004" name="jetty-alpn-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="13dad1ef0a41f6ee778ae8fbc5a021628d249f10b7f1d210b3f05b9ca733920f" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="665648342122e0407e5a2f2487b7ac7aeaac3af2aa8d41d482a80a1a30e22e7c" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="078b64d8418da440c1331173316e3b18bc627307ff786d6c4f776449d087d37b" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="1493897f7190e7f6cc85de65ab1d9de01c1bf01c63f92c3bd629b73a923f193f" name="jetty-ant" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="ceff9cc59d1024d5d98e4409bf1d312fde24f282e76ac8643363576b6d30967c" name="jetty-ant" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="5d2a2589eb513e148b8b1307fa996e66a2aab8140035aa279e473c682cdec4cc" name="jetty-ant" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="70d58aae3263a8e7668c4d7c4c5a8482a6ae3fe6a36f2585597e56e68c1c6edf" name="jetty-cdi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="96cea8a75bad83efb876d554d39787b61debe38ede46ad774b21cf5339569baa" name="jetty-cdi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="4320325096cb1f4ede4a37844690dc1809317393d7d405238468f86808ca4514" name="jetty-cdi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="8abead2812a3ab8c522671f4b77a9cc0c3251644da76e74290d1562f328e647e" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="b2ba5971d26d1acb8d119bc762c37c7bc8b14697e2a3468f5efa5b40626de5ce" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="6c055d2af6cbcb8406184af0bfc0e2670dc6c16967654f09778bbbd8a053ce89" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="5ade29325179e05abfc5c8f9fc36b83fc617c4c50ed74ef09b3ba3ed8c569ccf" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="68f92d0094a92707ac7906d08363e8abd5bd3c427f4ed6e5af7ed02a446fc674" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="033ae0eec3a381be1bcc1c6fdfb91b30ed04b865fcd1b7bac206726619549a28" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="515736f42bba9bc3234e69430be839db3a2321640100f1307d153cc3181fa756" name="jetty-deploy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="ab39e83c5d68f32bde9114f265a7fdcd0b71222993eb9a7b83a13ea70a5377d4" name="jetty-deploy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="c936fc2a7f807853b94d471ebdbb1f7396a73e4d3a88547355dd7b7a92b8b07c" name="jetty-deploy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="768424989b1aeb60a95e3a75412f1f98e8e4b98b4d15ecafdac67229d826092e" name="jetty-fcgi-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="9e4f5fba04627b016f9c3afd3163baeec29767523272e0dd5b1c49e41daa95f6" name="jetty-fcgi-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="3a07a4a7ddaa66dbee0f120c25ba14a91ca3eff0dff3bb5dbaed3fb790da361d" name="jetty-fcgi-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="36e1eed0481c5fd91e1fdc69abbba0b02bb28564c04676b71027e72167e76336" name="jetty-fcgi-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="4037f31d62f022c32a96c37e1d3a472fa88646ec9a253fd61793907cdfeb83af" name="jetty-fcgi-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1e2ee48d770bbdba4b5c5fa1c9a8b3d1fc4d3bafec0f5baf83609dbaf01635da" name="jetty-fcgi-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="90ab98e3cb075eaf6fd538d2e70e8723489034fb30fbbade337615cbb0a654cf" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="55f7e537a175d346bef4bb149799fd5050f1878fb440e4ae8699d2fe0d2dc28d" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="c992f352a8ccc54020d75f77750566acf6e64235f173e042807898bce6174b4d" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="e78e2669bf6c2ccb5478be704395047e4990b7d5c399dae989bc3ba37d0f422a" name="jetty-http-spi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="684edac45d1d760dd062f794f69fab2d83787287e3dd29d6244b83f7805a94e9" name="jetty-http-spi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="86a9cb0adc69b2186383d9c943d051e2ff6a39c7d66f4e8468b1a64d966f841a" name="jetty-http-spi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="bac3cf4e1aa2a2ccc6a252da3755da3b3f45ae8bba400d00993749c5c3defc3c" name="jetty-http2-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="9285402bb40ac8931c072f208361830e96d0185cdc3ba36635b35194aa6d741b" name="jetty-http2-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="f3af5c010e019ea60d365c8e00ea37f2ca869e3a77a19dadf14fd9886a7c6703" name="jetty-http2-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="0f07a5ffaeb095b542d3adae26bf602588a8fcfe7b4052315846a1fa94b58040" name="jetty-http2-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="a05e9174d9a3bdf914de34cac8fa18c4d4477857ae14e0a09c8d4e01c9eb737c" name="jetty-http2-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="f2b84af973ae0dce9ff44e6ad58a1c94ca6cdbc8a781d8ea08014ef4e825f475" name="jetty-http2-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="81f6074a78ac9170a727ed6ac02c55e1fd610812aae0a50498946e7b2e26cb41" name="jetty-http2-hpack" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="2c4739e81a1157e6ad05c251d935c689d0b1328a33690ef686e8e6426791c077" name="jetty-http2-hpack" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1b699a86d88ecbfa0142b9aa64d23221d7f76b039a7018cf21b3cbe17e6a29b4" name="jetty-http2-hpack" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="ed9ed762b9364977df953f489a311da71eb005341c6418fa493bca84a5c97d8a" name="jetty-http2-http-client-transport" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="8db41d000dd4ad8576f99a46db0a399dc14a459b90dc24d7522c0a106a896ea1" name="jetty-http2-http-client-transport" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="a22d6ef7c637564e51e8ded2389982e0ce7d767977f245611313bb8e2e939e81" name="jetty-http2-http-client-transport" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="3542922799cac963d6def35902fd05594a3767f4cd7b8bbe99aefb898a68d309" name="jetty-http2-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="774c0af68ef05e3aea6795cfaf58d1fd383bfdb0777549e2d35609abaab77309" name="jetty-http2-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="184f5e2256358984510352e625fc2e65094272025e782090263763b56481af15" name="jetty-http2-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="fbd8edef058b89c80e860416134102919da4c1fa76bbb74dc051bec7b28d4520" name="jetty-httpservice" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="5059c67851771199408bfb7d136f2811ff760a65fd05ce076e5c2c532ea22217" name="jetty-httpservice" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="dd754c28248c633477b0776aa18fe2f39133d88aa5407986aa5b635798d84efe" name="jetty-httpservice" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="ebe5a730c13e69f90aa33beb7d3d70803c90ab10269651b40c0bb82bcbee6763" name="jetty-infinispan" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="377e37b02bd28e4fb7ed1c4db69dc800e38e297186e0b472cb4a61ef82257140" name="jetty-infinispan" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="33549d20b86a67c48ebb4f58e1e36dbe44a1030424d297bdc8e96a0778621cfe" name="jetty-infinispan" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="bc8588b18964b571bf1fc7542cdc96c8e7ccc8e4f012fc51349fa40cc9d170dc" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="4b1505ed64ba457a19691d992c56d5430ac8889ceeeb090ba41c3860e97142d0" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="2ec55b66703b9511b803db8f1ac58229b4edae41c8e4cbd6e3262a7a8a27feb9" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="5ad5d2b44a2d2d26bcb98f17dba56dbefb271ee9283cfee55da52f84827bf801" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="b03465650fefe9650873f3fd88670e57f8a15fb9ae4d6c71478d6b5b97a63221" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="716da39c705fa178ff85af8b4f0e7ec67bf171720f6af850131323174bd0c138" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="086e22b055b3265f6f8653769967c2fafa42d9b693037358826777fac146b787" name="jetty-jaspi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="b26d06c739dc0e1bdb4c25e139a2738d11a635f58d6b0fb80e2aca07bd3cb2e6" name="jetty-jaspi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="a5aa1b6380b84d8498ec289f449efc8a78a00ec2a1b08d9903754e0afc96dffa" name="jetty-jaspi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="1ed53278e8b55b1b0324377d29f6a8d97b30af84a2c3fa169dbd9570923e7a08" name="jetty-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="e25987bd762ac993e13d0010ff8d8b74fcd1d67b540ce68535953a7c68283847" name="jetty-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="775bbda5c6fbb17fd0c9f97a42851a0aa643cc2dfdf93acf68311211103f43cf" name="jetty-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="e5ffc1d0dedfc7032cf2dad2a0ec844529456bdd1660d87916912b87edef2e85" name="jetty-javax-websocket-client-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="0dde0d65f354d3f6cef772780625cda08747b2211d691366437580e5f1073c4a" name="jetty-javax-websocket-client-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="8e1acd4eeb8762277e60471a1e7f11f57022e79bf36bb72e037862444052bf7c" name="jetty-javax-websocket-client-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="ed5300adf10f22ac71cd2b636a2f730a32b3af9f14ccb28492a88b7f67fd7a6b" name="jetty-javax-websocket-server-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="545d4b91927129792f47f62fa01ad75e81e796a32c48fa28d21cd79cdfcc75bd" name="jetty-javax-websocket-server-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="6f8464e2530b4ce5f8bf48760d0b15a0eb0f11ffeadefc6389836e43a3735c95" name="jetty-javax-websocket-server-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="ebf34c5a419373920104369c887e7eaff79937b37538e5e90d7d2883dda4b830" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="7e28847b7dbf9ec2352aa6e8c64a7410fd842f331fbd2f7122dba9123a335dd6" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="6d136e8f0758755d797254ce4bf317775454b1f8085065c405e08630301ec810" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="33b02d4e321975be335540861d397de9fbc60d700a65cf7e35b1928b36ae5738" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="dc6571ae1788c9491b868638ee21622ea5db0819645bd36fc4b42cf2f5e222a5" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="b807e589acb8f761e97f1862c363f7fe20da53d90f0fd3902222f4c961758116" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="3356f6975890f2d5f2f789a63713c9020ccb5f71cca91f6fb170faf10fe51fa8" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="2293310d5c77530990da594d7cce65b8a75aab836da29fd267ced1798690274a" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1bad9eec3cc75aab738aacfe9b05711847b807e98659e10fe9fd4b9c6f98b653" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="bafb54230f833cc25012bdc7adebabd39afc3eecfcd82015764f994fb10325bc" name="jetty-jspc-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="00a4ab88789cf7ae8bbbf88f62f300b70280602169045c4ca90a96a94ed602dc" name="jetty-jspc-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="57f3b0884a91baa3bd4595fd367453cc5e5fede1bf96df8daca4bd58aeb46b64" name="jetty-jspc-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="0e4023cff87122a061b07d1bb78d769ca423859952c0a030e9fc702761381aad" name="jetty-jstl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="3a5f3e88473cda948e34af4b1e805948b57c99402b7d2d8019ec281cdac915de" name="jetty-jstl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="4870487de0d72ba8c7cda88402b57f2f82432886c2abb800432b3f50f1cf2212" name="jetty-jstl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="9b8923982437b788ae854843ce524e3b993cdab7752eef99f3ad399824ada20e" name="jetty-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="012e9489075881f5db41c5807476d20ea6398fcaac5d8d0fbe4f9f9af6ff2261" name="jetty-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="3c66e866975343d4db5c2fb1b6d16c48b0873b2552214787127894e588e31aec" name="jetty-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="6344e8dc05b7b7aeea2d97ac595e1e1188c5bd1678235a133bd637ccf2e7248f" name="jetty-nosql" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="71786c77281793bee5e6a0354f9dd978844f91551e526f766fbbc96969d6b5e9" name="jetty-nosql" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="efcbab28706a3e9d8d5b2f757601ccdbbf6e813d65e4c1d3c61202f5f01ef1a1" name="jetty-nosql" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="4d610f088892e5ab23fc5515231b9bc248172241f30f7ca4d2b8426e69c205a0" name="jetty-osgi-alpn" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="9f61fadee2c64f5136e6994b57be754ad46c1b08a0c5bc4230cba06d3267ad31" name="jetty-osgi-alpn" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="f08a55a5860ac712f40e922d52e988bd5219194fc6c993708efa038663e09067" name="jetty-osgi-alpn" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="d117c4eb92a6d848b1993d4c86dc7719d0d09d8518d38f36a77e3fec5f40a136" name="jetty-osgi-boot" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="916c08f9f5bb5d8853ad8a8512dbd2f63c57367495fc5ed9f1f0cf3088a20cd4" name="jetty-osgi-boot" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="5f352c8abbda46fa1a151a1dc21d2c16c87ff8e21f08038edb5c7e172b758031" name="jetty-osgi-boot" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="c10fccc982e396daf56c1743a1912af02c05e12ea810917975fe7ec43dee0244" name="jetty-osgi-boot-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="eb8a2c3b54edc1a403ca634ec3f037b5c9c6cf82cecb2b36501192bf1d1b42fc" name="jetty-osgi-boot-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="b788605e50401359e4e70425930d930262de2eba119482d0f4fc1e5c5a571dde" name="jetty-osgi-boot-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="caa2ca1e20bcbdaf0e2f96bc76a1732d7eadd11e12e3d88bd1abfce8fe7828e0" name="jetty-osgi-boot-warurl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="6ec516fda292af153918a01b302a40183d0fdf30c88b57ab43175874148f0b61" name="jetty-osgi-boot-warurl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="a90a953c7ace1291ff75df4b3b610a2282d728a31b37ea5769774f3fb3062e0c" name="jetty-osgi-boot-warurl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="d857b572303354eeaaceef6663ef745dba6e5e76f58b402dc1e0362a4e542c4c" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="221174bd580294dd5ef6fdd505c8bc38e43d3876e47a209c272e7b3493c31604" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="afad4349fdf75eda16cd02e19d89c41692339219c05abfa60516ad46c8539571" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="562542e23aa0ff89201077aa5bd7c9fdc2e9080b18a0cf7c7ae59d1f2dd5d547" name="jetty-project" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="1b94155f03a6c4a7b42c1f20ec0007b7a9d09db8a80ca11e6c36efda18c3a344" name="jetty-project" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="bf6c103fad0e115a85f41492989e067f9c4c959959ac08ee275ab77ecedf2123" name="jetty-project" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="2ee801046ffa2a11ba9c60467ecba8fdc388b17a1c8e17a06c5d145c858e1239" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="eee02df2ae0717844aa50e86fdd11cf1d35118fc60add1861679dce91c795423" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="8bd8a503a879f1c508cd6d79ca29499c06589b0c209ce1d9146567cca1445a14" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="dc4848ec7da2a7a1f406c6626d54e0c689790a08438db1dd3e2b7d4a8c4d719e" name="jetty-quickstart" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="c8290740a319ec3eb85dc361bcd0c18a9bf5c050d0ca477c3ac9900fe297f13f" name="jetty-quickstart" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="85495aa4fae3da9e6588851611c8b266bfe4d16000058a6e2bfbe430bbaf558e" name="jetty-quickstart" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="962815fd48e9a4928070ce5331ddca1065cc6283b43e54e5244197da21f37af0" name="jetty-rewrite" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="fbe993de228953c171c49b6708051895123107db60f837ea54d3ea2ae6292d1e" name="jetty-rewrite" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="b4e3f60c1ae1376b8b3e4b7169ecebde25c4df9f013993ff99bbe116635eab0f" name="jetty-rewrite" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="70a6b6b46ec32db844cc732c265c415d57504cc55dd4e9575b36879546f8f53c" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="bd7f82da50157a78430a3a38b142dd53552c3e78ead4ae13295a6e2f4df814a6" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="681801c534bcff67fe4850f4711e98465fa1a0a3903ea42d65ff5e767230ba33" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="8f4a6988c50743aaf5b2932d712a3d1148e2920af9fe2f2c2e79c0e20bfde5a6" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="a0bd4ef699bb7fbae7571ae040e2b2352712e51e7590e26fde7156d5e97cd48d" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="0c1aa66e04a0012ecb2ab9d8cc0ae57731e7f5ea313234a381899f9f0e73ea5b" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="21a7676381f7b874e1dfae30ef8e5d88044bd66f30f16b8f2e697c3c2930e0e2" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="4245814b990ec10d37b8760539ef690fc14b1742218223fbe18ef169b967bd70" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="61d461a0ab8f7b83a9286bf5e68a31142f6cebe78a89790eed32585af58a8a68" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="8cb57c01c9669184351cc8a5fc9febcfc3f25b1066451da3eeafdfd29e5c5239" name="jetty-servlets" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="9e15c8d986689b8057f17d5c9da029bdbb3d645348435ff98c81c341af24d98f" name="jetty-servlets" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="4aeb9b1cc540ebca5180e0256c52c8ad210534950175e05ecf00ecab1a731f24" name="jetty-servlets" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="38205ae2a271d28262fb4dd835a1df35992e158ce2d7533cd9c594fa7b8a6de9" name="jetty-spring" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="8ea0d26620dca506def1f0a3038320e1aeed0c7a2d31b9e9aec8a37e6d5725de" name="jetty-spring" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="895076fd194ec35bc791db61b8bcaae6307f199859a81f4534cc331f9d3d04ed" name="jetty-spring" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="0fcb94b8a446d6e44f6cc456f798e4ba0e62c881880298ecf8e2e7efec4f747d" name="jetty-start" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="95342e02ded9d9d130a2527e51a361ae4f1e3fe9b557f2fd7389e98b57343765" name="jetty-start" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="0a122535807b090223a6440fd11b296c1a64f5e183e36f489301ff1e5c699a1f" name="jetty-start" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="1220916fddd9656f743b7ef01314f31d62f0ee8352f9b8bbd79d0becca8edacb" name="jetty-unixsocket" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="c1d478f2b7a0268a7f0482b128c90259cfd387b799516f6a5add55d2eb912e6a" name="jetty-unixsocket" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="9976adc3dfe72f94104ff52e42d32b63b32eb518bc370de0c7e5c3eb2901a0b8" name="jetty-unixsocket" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="267307efb845cf1e54a918e91edf8a223adff75111f7ae19c06104052c82e700" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="19cc3b01195cbad262d27c8f81cee65af252ee8b00225586f8c3a8e511c2aff5" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="c3ad545ba170b5d125b885daf414d1b8fb555d33f904e2772df862fcf2dc15ac" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a623175a684f878cf9027a22566b5f7394b082cc19a363d4659017aebc0d193a" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="67783f7a15ff093b76d6253ef81267200bd2a22fa2d247322e487415ea27ef2e" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="9c1f93a17cc4ae68861e76dfe3684fa9ec6bed0cfc4837002087c563a1bef6b5" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="beca88be3fdd1ef299413bf287b5e7761b1e178fe88d86e35f56609c745665d4" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="0000ac82b5065372d96c3acf2a7e1ea3762dfff00fcfbd62a78dc6557df79b22" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="4e820250c2b99f60a5ea305b465483c8d1889e775f3c96a3ebeeca76e8718be0" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="8ee55ec2881db204d893a4d85013617545e241297723df4cebdc19d3ea6004d6" name="jetty-websocket-api" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="8560b7a4384dcf9f3e328fd8f7fca9ba1828609984d905023c6deaf102155f69" name="jetty-websocket-api" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="85a6da0ce82f954e36959984a90c85c89cd5e33dafaf2405902c63cce8212d5d" name="jetty-websocket-api" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="75c27463b6f5176555459be285b9f93603bd3de25bc40c88ea32d000ec38ff45" name="jetty-websocket-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="bcef3f8274fe561a45b032f7f1ae1eae330bacd9b478feac2145ffc57d15c210" name="jetty-websocket-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="00feff659f3b392b17948fe2bc500a0281a5c49b09d02d8937534434eeb7f201" name="jetty-websocket-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a527a293641f5aeb36389be4c69075f35e157acd5ac8191ece82b2ef6a4043d8" name="jetty-websocket-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="1c4233f2cd7409529ff9871fd4717f3155d72c608c460f3862faa04eea3ba6ae" name="jetty-websocket-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="345f15b9f1e0b09e8115fdfc51db4e8053eaf8201719b87a2d22c29c14b0a82f" name="jetty-websocket-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="96da15f665eb48e6a53a720d3fe69a999a940b522b24385a00cd7e2b26b37032" name="jetty-websocket-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="6c1463747a61f6cbc2976ab1adf8360578c32726be1cd8f7a04a6ea8a8355ad0" name="jetty-websocket-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="362d47541fdf735e09933db4ef21f247e86f7e80bae6fadae59bf0ea85e77d1d" name="jetty-websocket-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="c3f2eaa1b376808f76bbee0f9988a913ccdfd211f08c86b298ea4e0304d11fd6" name="jetty-websocket-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="c364d8c73d643df570afa8ef68f6f85d02a3b32c5f2cdc7c9d9681552540b2b4" name="jetty-websocket-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="b9412806ac81f6e21a7c976d837d515d215b2cd61215e6b8909ab1986567ed40" name="jetty-websocket-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="fd532052b99acc92e98a96924f82de61667657be0a83c8d42852a9cfd1936de4" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="3.oe2203sp1"/>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-5" date="1612785600">- fix CVE-2020-27216</changelog>
  <changelog author="zhanghua &lt;zhanghua40@huawei.com&gt; - 9.4.15-6" date="1615982400">- fix CVE-2020-27223</changelog>
  <changelog author="wangxiao &lt;wangxiao65@huawei.com&gt; - 9.4.15-7" date="1619006400">- Fix CVE-2021-28165</changelog>
  <changelog author="wangyue &lt;wangyue92@huawei.com&gt; - 9.4.15-8" date="1624449600">- Fix CVE-2021-28169</changelog>
  <changelog author="wutao &lt;wutao61@huawei.com&gt; - 9.4.15-9" date="1625140800">- Fix CVE-2021-34428</changelog>
  <changelog author="liangqifeng &lt;liangqifeng@ncti-gba.cn&gt; - 9.4.16-1" date="1663070400">- update to 9.4.14 to Fix CVE-2019-10241</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 9.4.16-2" date="1666612800">- fix selfbuild error</changelog>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-3" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
</package>
<package pkgid="830cf4f52c8a10e0cc09904c0b3aac64a42507d38f14c1d4487184d09a342d27" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="a171f113add79a49c67f728bb43dc109a30114091deef9f67a7380b300d43547" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp1"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="2d4f660490ee1db6595dbb3e0c79032b2e189595186dd2e0e86606c18c444165" name="jffi" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="f9caccb1219eb6dfdb929a364414367c05944012b5aecc36fcb7749bdad42bc4" name="jffi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="e96423e248f769c783fd868b6d4ce17903d66c8f61123047fad2394f0b42974c" name="jffi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="5058d5f6ea4de23d689d47394c7b65990b8b83b169469dfbc71f187260073322" name="jffi-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="412cc1df34d3d9233418c5d98dbd7c7a546fc2406291fbc8b7192c82fadec06d" name="jffi-native" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="3.oe2203sp1"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1.2.13-2" date="1684411200">- Add Buildrequires apache-parent package to fix pkg_vcmp macro not being recognized</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.2.13-3" date="1687953600">- refix pkg_vcmp macro not being recognized</changelog>
</package>
<package pkgid="b42ecb52aef10ba1460c074855f42b3d762d9621334290a90ddb5da82ec13b47" name="jgit" arch="noarch">
  <version epoch="0" ver="5.11.0" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.4.0-2" date="1663934400">- Add glassfish-servlet-api version limit</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.11.0-1" date="1669377600">- Update to 5.11.0</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.11.0-2" date="1680091200">- Add classpath to resolve NoClassDefFoundError</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.11.0-3" date="1703592000">- Fix CVE-2023-4759</changelog>
</package>
<package pkgid="c42750b8e4eb186decf757ded4bd9cf137fa640c3a3b523419e9e1331dccbe51" name="jgit-javadoc" arch="noarch">
  <version epoch="0" ver="5.11.0" rel="3.oe2203sp1"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 5.4.0-2" date="1663934400">- Add glassfish-servlet-api version limit</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.11.0-1" date="1669377600">- Update to 5.11.0</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 5.11.0-2" date="1680091200">- Add classpath to resolve NoClassDefFoundError</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.11.0-3" date="1703592000">- Fix CVE-2023-4759</changelog>
</package>
<package pkgid="776719ab9d842b30de1585cf0b6aae4b8700128b3461244ce1f33eb4119fdee5" name="jose" arch="aarch64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="67428358e3046ae45f2a98ee788b63bde90428d1908f8230b6545d7a2ab549ba" name="jose-debuginfo" arch="aarch64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="ab084ef997edd03d26fb7aae9485639cddb8ca300c61b54183d9ca2dcb785aba" name="jose-debugsource" arch="aarch64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="3b90775ba1bc8544f962ae549a32ea6fffc803a91b2f56d68b61a76bca686b46" name="jose-devel" arch="aarch64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="196ec6decf6ea2fd8fc17f8f04d8f010e661870e42116f1f755eaeee518575c6" name="jose-help" arch="aarch64">
  <version epoch="0" ver="11" rel="2.oe2203sp1"/>
  <changelog author="licihua&lt;licihua@huawei.com&gt; - 11-2" date="1712491200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2023-50967</changelog>
</package>
<package pkgid="6c0e38457a9a19fd113a8afef647a7f71164dfff7d89a7a2224b1485b134589b" name="jruby" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="ea005c34f39412ee17db49e3a267c27810af0ea54220ba3fc31e546800ce2e3e" name="jruby" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.7.22-3" date="1684497600">- Add install dependency base64coder</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.22-4" date="1706270400">- Fix CVE-2023-28756</changelog>
</package>
<package pkgid="eae818a2270d4f8f6df6ac58afffc48dba370b584d8a4570d73f950edc70abf6" name="jruby-devel" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="a3e455a6054102b914e599ecbb7fdc503362ca03e3b6760fa99a8a50cb596b80" name="jruby-devel" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.7.22-3" date="1684497600">- Add install dependency base64coder</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.22-4" date="1706270400">- Fix CVE-2023-28756</changelog>
</package>
<package pkgid="f570b5496db618b8d7bd1f3fa23539ac30d764c10d9b56a4594a3a5c17806811" name="jruby-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
</package>
<package pkgid="e3accbda9aab054c2bf4f6739c8e90aca482eb0a84d4a01c63c376a4c435890c" name="jruby-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.22" rel="4.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.7.22-2" date="1678363200">- Fix build failure due to snakeyaml update to 1.32</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1.7.22-3" date="1684497600">- Add install dependency base64coder</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.22-4" date="1706270400">- Fix CVE-2023-28756</changelog>
</package>
<package pkgid="e7943b3d696bf41aa0e7aed9f1540445fe38c9a2474dfa89c978913cad5ea650" name="json-c" arch="aarch64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="db6b6caa13bb0bbc16fddb554f5837341920e0d87eb1769f7e287b28ddc643a8" name="json-c-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="b6b683e89b6d4ec70f432d44759589bad16008daaaf233313d8b8a9257996a45" name="json-c-debugsource" arch="aarch64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="8682cb7612ce2bc1507fbb5713a600b07bb884e7ecfe9979d923b2b2d6810236" name="json-c-devel" arch="aarch64">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="a5925407513b4dfad9adfb34041b87c2cc4703b432c52905e50fed32ef2e4506" name="json-c-help" arch="noarch">
  <version epoch="0" ver="0.16" rel="4.oe2203sp1"/>
  <changelog author="liuyumeng &lt;liuyumeng5@huawei.com&gt; - 0.13.1-9" date="1631188800">- fix broken RDRAND causes infinite looping</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.15-1" date="1631620800">- update to 0.15</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-2" date="1648209600">- move json-c</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-3" date="1649332800">- add check</changelog>
  <changelog author="wuchaochao &lt;cyanrose@yeah.net&gt; - 0.15-4" date="1651838400">- add   backport-json-escape-str-avoid-harmless-unsigned-integer-overflow.patch</changelog>
  <changelog author="fengtao &lt;fengtao40@huawei.com&gt; - 0.15-5" date="1653393600">- we got upgrade error when upgrade json-c from very low version,
  for example json-c-0.11-5. because old version has a softlink:
  /usr/include/json-c  --&gt; /usr/include/json
  and now, softlink has been removed. so, we fix this in pretrans</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-1" date="1667649600">- Update to 0.16</changelog>
  <changelog author="mengkanglai &lt;mengkanglai2@huawei.com&gt; - 0.16-2" date="1668427200">- add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
- add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
- add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
</package>
<package pkgid="14f3afda767bd0ebb00227f3548ccf0424d033fa9e3c586a04ab07a9cdc678fb" name="json-lib" arch="noarch">
  <version epoch="0" ver="2.4" rel="23.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 2.4-23" date="1728302400">- fix: Handle unbalanced comment string for CVE-2024-47855</changelog>
</package>
<package pkgid="eb14cc00af3d79b3c8115aa7d2cd565d59f90b95f831603b43df35d6f30c7757" name="json-lib-help" arch="noarch">
  <version epoch="0" ver="2.4" rel="23.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 2.4-23" date="1728302400">- fix: Handle unbalanced comment string for CVE-2024-47855</changelog>
</package>
<package pkgid="2cb46e710e97f6c73e7d52169c9607cfbbd7580241bc08ce3c37f230eaf5a81d" name="json-path" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1.0-2" date="1709294400">- Fix CVE-2023-51074</changelog>
</package>
<package pkgid="e7affe0bfc6e7cd4649adb5d1c5611435ef3a6b75cd8bc07825207a40b072884" name="json-path-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1.0-2" date="1709294400">- Fix CVE-2023-51074</changelog>
</package>
<package pkgid="7492bad8b7e80af3d8a834787d41e91408357928409a38b06fc3dbf06f728043" name="json-smart" arch="noarch">
  <version epoch="0" ver="2.2" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
</package>
<package pkgid="7da58c78882c1c644c80ff0527f1a7b0a9b05745655dd9ac8f30b3bb7329b4f8" name="json-smart-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="2.oe2203sp1"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
</package>
<package pkgid="8ca26dec1ec77c9ae292f53d717aaee8b8e9db08516e5e5574552871fc3c94c0" name="jsoup" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="2.oe2203sp1"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.2-2" date="1709553600">- Fix CVE-2022-36033</changelog>
</package>
<package pkgid="df13ea1e2e867c6fdad96a79a5a9e0193bd2d25677b3582ff9d3c911d64a86f8" name="kata-containers" arch="aarch64">
  <version epoch="0" ver="1.11.1" rel="26.oe2203sp1"/>
  <changelog author="gaohuatao &lt;gaohuatao@huawei.com&gt; - 1.11.1-17" date="1623844800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:move timeout of waitProcess to stop process</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-18" date="1638273600">- Type:feature
- ID:NA
- SUG:NA
- DESC:bump version to 18</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-19" date="1641556800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set GO111MODULE off for go version 1.17.3</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-20" date="1645444800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:check file size before add nic</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-21" date="1645790400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:modify hypervisor parameters in config file</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-22" date="1646049600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:use host_device drive when call blockdev-add</changelog>
  <changelog author="yangfeiyu &lt;yangfeiyu2@huawei.com&gt; - 1.11.1-23" date="1646308800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:modify runtime build flags</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-24" date="1662984000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync bugfix patches, runtime 0079-0096 agent 0021-0024</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-25" date="1668686400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add timeout for all qmp commands</changelog>
  <changelog author="Vanient&lt;xiadanni1@huawei.com&gt; - 1.11.1-26" date="1675339200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove kernel_irqchip option for qemu 6.2</changelog>
</package>
<package pkgid="48d0150c81b74f02a3e9523b9bed7eeb11516d941b3d29138c1edcdb1a49c444" name="kbd" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.5.1-1" date="1667476800">- update to 2.5.1</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.1-2" date="1717070400">- resolve gzip time eliminate differences</changelog>
</package>
<package pkgid="47533c531322f5b45729d07ed5e75efb89bfef0310c515033be72b7268886033" name="kbd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.5.1-1" date="1667476800">- update to 2.5.1</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.1-2" date="1717070400">- resolve gzip time eliminate differences</changelog>
</package>
<package pkgid="b94eb8de592e088220d42a55a27cc023d48a8f8345c251c7824c89c6c1fc9bf9" name="kbd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.5.1" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.5.1-1" date="1667476800">- update to 2.5.1</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.1-2" date="1717070400">- resolve gzip time eliminate differences</changelog>
</package>
<package pkgid="694e53347225353d59da97145f4901da1e09218446a10e0d83f1dd17399d4301" name="kbd-help" arch="noarch">
  <version epoch="0" ver="2.5.1" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.5.1-1" date="1667476800">- update to 2.5.1</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.1-2" date="1717070400">- resolve gzip time eliminate differences</changelog>
</package>
<package pkgid="c2b0d3586a2ec157a1c3293d3e7c7b4fac590253caf549d3eb211cf3ef566523" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.5.1" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.5.1-1" date="1667476800">- update to 2.5.1</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.1-2" date="1717070400">- resolve gzip time eliminate differences</changelog>
</package>
<package pkgid="3a662ffe914b881a08f862a7a14ea01551d8e06373d8b6e8ab80640b630f83fb" name="kbd-misc" arch="noarch">
  <version epoch="0" ver="2.5.1" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.5.1-1" date="1667476800">- update to 2.5.1</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.1-2" date="1717070400">- resolve gzip time eliminate differences</changelog>
</package>
<package pkgid="411f907b944cded2462d36e3ef58043a7ef96fcfb589d9e021f8835cedca5a3b" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="9da73491f3588ad22aba2877ad9a30b92533bffd0f599ca4459a2f4112272f4f" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="c4aa6d2fc91a8f1a9faf725470557cf670bd1d2cb7c95b0ae0a3c1017b17ebe3" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="a1f16f93584a5eb29873eff49d3cdc9e0b43a7c476aa8ebdcb181a99a681f4c1" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="6e41b075e5e48a2f99775bafed8bf1c51c35b09a8947d60c9b48588e457d893b" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="0fcb99d644795b4eba734eaff36ec33a3b29e7b12a10f6b67df61a7983f60058" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="298681baffefdf6999cbda9d8bf3e2769ca1003747ac829d8ee4a2f309fd6eb5" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="33c5b4bdc05489d3eb9137056c6008dab441934ee4112dfa871cd13d280a79c3" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="05cb4e1bae69971bc915d773859fb9fcbb96d22238027f146bc79175f2271c27" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="45abc74ccbbe53c0a158fcd2824d8ed3f9de7c4c39cd0d356888ba944f8f8e5c" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="e6df947bae769a2992a2d4533e97e07e76e59174603e501187739e9dd3a32527" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="481b4debc9e2a212d901833869458e9f1a9ee5b6d3abc928ef46606fedaf7349" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="5552c5fee8929f78e835600ec070944f1ca5ac895e7c36b05ea2df75e4f8a1f6" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="b52e75c4afe0ac4044fd4de1869eae08d34c081ab9150a7b22e7c995e73d440a" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="f5354d950abf6a8dc60e250d8d2b4771ed6aae903f61455ef8aee306a09d6d2a" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="9155e6b857b8c11b479bc93480685a6801a1397805a39f97df3d025a24be1388" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="ee3ef0dab23a736fefd3b96490f74101bfd673402f9da486f54d525f348902d7" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="8b379d38004472dc2e7e13f72593cd6a7a8947d2169b24d695d7f9def83cd9cb" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="59459011f31c878f751952ee1158bac715c5450e5a0bffce4dad047e4bcda2dd" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="08c2d9e3c93ff4c092390fdc4dc6beaa0fda8e48ac4b51954c02b1a430618f78" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="da4938f5d185cb080e1c7de13abfac9a1560a1164e9a19134d7fbafb24b5f0cb" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="feafe97ccd74d235251c277892105f1ed6b5c59a8e142e466bd6d058935eb920" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="94f128d2d3416bdb3675ef860ddce5a2f1f8d96d3a2510b1460e2b1f1b9d2178" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="0da2d3d6a70c0bed624fce932cd53540ec235ecb06854bd6ce8f2ee0f0f167fd" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="f9671d7871872fc16c5dc6267385e29ba661cfb105459e0ad2ed3ec4f2d980d0" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="9ab14060d913a12af831c74b8b9d5647435c70bb7a106edbca9a6c21c6602c77" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="7b8d04fde53301d6e11cfe5ea2578513de09d93ccab2eec3a37602f8454a4b82" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="57c7fcd8ed851aa9bdaa235382fa16f55f13566c4c6f0388b681370617321fe2" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="6d5bb9660b7138a41095823b26930de3526d3de911d0284ea11c1f8871f90d8e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="3dde8b4eff4eb4ee6e0c6c28a507806cde9509652300cac4042f2c8630644e0f" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="6f150e5dfb6726129ec4a8fc1d84d448dca43ee1c0db79604dba602b4eee8015" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="33d4c99090220302d12ccacc1c71fde07ac1bbd17694956bc2ac3fb20c5c68ed" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="7b2d9ffc31f7ad57f977dd063fe2fc57705c1dbba2f2b3402f8db6e758d7fccf" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="99ff5d10a0c079fa5aaa8b408735e669cdefd46ec216a538467f9210665a9cc5" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="542a485788e7297d2418af3936d2d6e3847fecf17f869031c5adf911ded90c07" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="3f6bec9f62d93b83c5f8cbb0c4a0be46055bbe60fe574e9af22424f9844b04f5" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="dbc0341b4ae4c46d5725bb345af48408dca01beeaa0d140e594986678ae487b9" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="b4f98101dcd1216f827ab6b71127e5ede5d9b22721d3e7d51c70baf794eea7c5" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="0cc96412049499d8dea878e029ccf05521870e6f4adf9144800e8e27a75d6c92" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="149a05728fb466cff18ed6b3cf81d69d05929468be0f867068f142079b43b1ef" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="9ab4cddf722358cdb87b3521489cfc12756891d4e59342dee6e1bd851d30750a" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="a10b64858894ca1eb70f0796b08dfdd5706a7618e8360dfc54f0d05df71b9d38" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="4bd86e3c41960b1cfac44ded9429ba36de0a856b606e4221e6f9e4e74e180c09" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="c7c551ef1c2d221569a49c43e52fb2389d817857e5d69ed17acc8febdafa9f0e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="45bc7d0660f84626c76807e67542b6db802f4d35a8573cc03427f6e7dbb18a60" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="aeb23c9393d92a39cb913364123c09fb02eeb8476ac75d38417e176adc3e580c" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="c9975190605e1c9356e036d762bac99c866c35cadf73d43c0fdcb821def3032a" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="136dfbb8527450fc67daa0ec7fee2f6da82e51f0e4acb738bebeb72470e32349" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="dfe2d2377f062d6e6d545f9c24740d0d62d109d516c9e9cd163948cc7392d07b" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="f7134e9696905e8fc27fc96a5a99ba4102402d8d7a87e477e930bb1999efef19" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="7ee8abd55d6db9e4e27db714db6b99e25bdb8c716093e4bef98d180ec33b2d2a" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="de895a3313487f154aed72f8e204db55baeaa9989c33583e49d28cf46a728d56" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="51009b54771e3962b83b3354d9728e1f18f9a1963778ac118dc9102b8cdbd6a2" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="d617f7c82d17367917b49c6b041bbf18b92813b5d1d7ff3fd89280723a0a2b28" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="ff5993a1c36f0887146e4c7c7fe0b0e9513dbb560ac79ba29eff239f5df85411" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="2ff80a9f5540e47d7ef7411176a751817fa33c0bff31f6637ef214b318900f4d" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="e9a7e85515784bd3d081519ae3390a140fd3d61095fab3663ae427f3a4ef4fa8" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="1a81797316d244e371f42c7bbd0aed856f8c2ba5ead8b73c6a6c41970d31c412" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="e91d991416b357dcc2b11ea4fc0c550fa406c589f89eeceb7e39d169d1469928" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="18b72c8dac47c5ba4171e7f1b7e30500a392a3e5b1ec86616ff7f98964401d3d" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="615362a0641fd20cccca70c40a88632ccd7aea21413eaa9cc2cb46a455749746" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="3258e62737904b1f96d762d9ec044a5fdc97c2cc7bc1c76270142e76eda425ab" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="bbafb7a4bb51ed5e36d2497b4c3db2b0dfdd33b307221702500109079a9bf109" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="f631a0b39d1cc3d153724779969078f4e1bb069ce170da044bf72bd68cf7e539" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="8a8cd1bb0df3512b940de7c11f3f3668a8db1a76fe7373da2d4825d114644d85" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="5b6ba192523247e91a0d8e099913dd7fda3f59318b43e0d00491be8e44af6499" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="b2a438f3e54c843794ee6d5ea6de80d4381f714ca0ac22378e41d13057453782" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="593afa75438a03d35e74d7d53514d47e26b937aee5f5415591328b2c88703e32" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="d91e1ab4832506e775e9549774f2fcb4eb7a1ace5ef9e8a3668719834868a601" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="0e03c139a2e6a9ece303e07c2039a92a3c5f8683a569696f5a3cc76b26200cb2" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="0324af2c34049cc5a3b62966b0e026e3c914865f728d6c1d034edc0901b5f1f4" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="e3440a17c49b61e50b1e33cc234330faa238d0aa658af01d486b7947d160815e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="49030f45decfa5f355aac3e33b0511e529d72469a96b22d032bb77884717a116" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="a0d510801d3ea99b854b78de0ebaea1cfc6e9d9415674be4e84bb92129d96204" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="99646c83444d368f4f80525290569cb6268ab16d275037e3a2e123902350a550" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="1355af8c87a60c421a6bc8570ebd5c6ca76f9668e2bdfe11d406e855a1e7fd18" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="260b35ec9621cc7cccb48b21a0e7a3ce423682c32bc155dce644e79644610a11" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="0ceba90eb881576abc151f212d010e28d69ab3f2f4154c5d5d09e3569616c314" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="b58da67826ae2c8863a05ffd472674d5600dd2f61ad5e4dffd577cb26199cb2e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="57f26f5ebd94b75c2df5b8f0472165218f55680546df5a42a14e1714e5ffcc90" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="3db2a6ab5c3f6da078bef37c9812c3599c98d62df7941206ea22a6f5a69ee65a" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="0f02a8ace78c5a7b6f961c4c3fa9ffefcb36e505dfe74eb9dc0f88268e3e1894" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="c5c06d2e8c5657a2e23fd7bac3ab709e986e8f68f60e6e98db561416943410e7" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="39b14297145766d65372ee7dc1a6ebbdef9f21dd6d8bb0ae74852174c45c95eb" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="7feb2becf3e11073516102f344e175a8a1fd32f1ef24e7c057bee7b6fcf73eb8" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="802f4cf8bf2ee4c6873e9ae955396272c18431d62089c9f92ba4e77450f5fccf" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="22b7ca8301e1fcfb2b1c3fdba322015876ffa9eef6de042d0fce2becb1cc03dc" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="4b8e570971567a319a85c7783ac6f30c7ac05dcdbd77118f8bf46194be3a868d" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="c497f1c7d83815453ec61e31a3800ea394233cecc86a6cdc4a87cf798af1599b" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="e5f5c42bce12d8c934bad72a1e89a62b8cb09c2a8382f158554a6fb1cac86f27" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="ffa77b579cb2181809333853895de8bc1be8b8e4482922597a4166bd43adbb1b" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="2c782761b8a5bc2df6c2074c36beb5ac75d5d74acd6075365bc794bf7b632be8" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="f174e5ca50efba3df390ab0945374ca9d00793794d494970c1d5444a6b5142bc" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="d3f6163a9cac9fde7689419da4710a3eebe800803bbc3ff9177c67656c489b86" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="88e2597066646a73bc66a70b3794c8b080721039236d7570bc64414c737a5a01" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="a1f017594823de8d0d859a6c8d12db0ffbee47a26b5080ef7bf8cb83d78a5e95" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="c20692fd621b73c8203e9a7fe6c6f73392cbcbc5486501edcd4209b84d5ca882" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="c97d37bc4a7e6cf12caf4ef2d4ca5216bd1f150a1493e86f0fbe90293467add1" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="bc5e47e6660fb98bc4585ab14c7ee19db893b9b789fa1f807a421d71b9d212d6" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="af3304903b89fb858991d8f8200de74e343415cbaf8dc253cec6b9749bf1654e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="daa38d58a38efa35eee218785810ca2fe722a053d53b9f73b810946bc0f05039" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="54bd8b982c58de6d395d29842e905119e31856b10492f238949cfcd80f0c2695" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="8d93d677e5035bea553928007c21c25c211c34dbe4595f158fb2f48bf61fcf9c" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="a716aa44f3e8e02a421f86957edb4a89a39d2e8ff0f599c1396d8c489207dbc2" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="f0fec89d5899fe0c594a43854972badf3617e3a5608a2a5d914ec4311d7f1962" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="70b1e2d2bc739fe2036d65b369e64bad381a0518290fd231153d10723a094e81" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="89c5f21a9206f4503854c01e2aebb4c0421f2ba1b166657b358819f84b71c069" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="f4c0dccd3bd12e7d2521169d276e97f6a5132225f8d5cfe9c567155975ca21e7" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="f35fe846cc4feea3fb4fe4c2e637a61323895fca7b23af59f01f9f502b436e63" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="b4caedf77fbdc2ad1847a1f2d5df382cc2ca9ed05dbcff6a963169b40aca8609" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="8df58aeb1be9fbd8b26590696bbb508b8a16cd4ba45687c6d6113e619fc185d4" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="29a1778516b6d0717a10894699c2f6db074f4532c75fd6d8fc0985ae79dd8e1f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="2c05b3bca4a903f12e3d1a576779aa2a36d1e71ebc8db8f18ed4e754177abbf7" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="c83b48a9579f6469022a53067a0c222cc78d589eb3dc49f774d46abee25312f7" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="1bd06669e4e18200606330942ae35e3ca73ff26d07f34d332748d3fc8802aac1" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="5ae90d3412484dcd92296403579bd7ecb0b6fd9dffd1540525a4c1700642a996" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="692d71ffe14dcaeae9e53fe2e9cfcb42f5c3bf5427c41e6c11c01004e3022557" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="bb97fae8c67af788b19b46a5782796a2afbce732b9559dbe3d8d427c1f119793" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="52a40d55dcb16a9f4ba544de28796ecb0bd0470923841157b04988408261eee7" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="22271402b1958f8a8316f863d8697c91d56c178bb0a0cab7f3d51c3bd8fa4269" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="56910606dd20d0c24b85db71239429074616bf08263da542a5bd6d689ab07a9f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="23e1962423f4aa9cc927a41f94e9b789d27781bea31acb60955d513d38f11bd7" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="87c8cbc259c47f1b2ef25fe4e720439505f79faf5e0d131c2eed076afa258869" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="7e1623df0bb95c701e432fb9d064bbb6494a5b4ce252f3ca6b494ea24e737844" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="bceec0e2904079d828656157f7543a866d90a8ac857f68ecdccbf1084120fa9e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="04760ccfe9061e51561b20c7ebaaf52089ece9eecf6f0d6ee5fb9e567db362ec" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="0077f66f56e15b887e21e6fd70fa47055cf2403a37c815ee809c6e2335bcf5e9" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="061f7a586b9747a7c999474c31b4c48836101c666ddd4d95036c3a58f3b9405c" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="64005b785cfc34c5eb163d4abaa6258dd0146097cbbea36de916e0d913783c2e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="79d7b25d8dc31f446b7f77f0dc74c816e440a4c03f3b3b2b8a5cbfbf4788f273" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="2c8b8221f0d578864736956a655234f6ad6b41b00b4dcbeb6d65577aebfff576" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="dc948c3729f4595b8afa43f13573f78bb6c85a54b1602e40e13ea9b7f66ef220" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="ff3da45141b893453e0904302e349d9e4dfa1294d3b019bef2fd089a223aa509" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="8f7ce4d814c0a2265bd9080419bb22521d63ff4f30e33c842434ce7b2c3a0c59" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="e9c4ee6802a24fb277ccd98c39e7132558efd09a1834c5fbc391f430db2db026" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="9072d65f99dc7687951a0649e37a32f73488f23c383b4f1cd2b5aa014134d321" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="6e011bcf6d67ccc47cd0fe357b484cc3b8eb9b21a4d7d194a8c215625d164ec2" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="1d78f71f5ed446d253cc1e23bd745b79f66f0b97deb8cbc29e799e177fad0837" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="00d797185f01395fee6c203cd3c9d0b4082398e1bfab607fe8040253b2b3ae2a" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="9336eb0688c4af7d0be926983028ebfa4959f69a9a17e700305a6d8914d578fa" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="ea4f2acd798f4854f7a5e88d8a267feb3290ab518a60082975d837e3c36d416f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="75ceb41e32d68ef1466c784095747f04a5340917c61619b6ce5d46e90cce3516" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="a1248c9c8676e2ccc30167ebac69d8a63a6a5344ce354f2203ab545ad5efa322" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="a841d5f7ee1e86527599c5b2155bb7a4f16cf99867a62b7109c048bb9b12935c" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="db65cb35edacef776ec3c217c8b01d5d95b158c7543ddad10c2e1ef57b2c7782" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="7554c99130a9d9cc580fb83e503b6da20f4d88289913cacab1774acb86ea9277" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="bc82210cc8d6eeb81bd03201e44db907230eca6f907f87d4cd231113b7e551bb" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="bb75fed39a64b9f32da6fec0e58170434ab0eda24c5b586d0e7135121b9e8ac3" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="be1ef618cab7d5f2761f1fc19ee0f4893c9c9382d8d9a5a5a3c02cf50a1193e2" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="630b4513b4230d35ce7a0ed6a05e1a5209e09e7f769cd6e1924786a5c78b0630" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="093de58e8559de4231c47b786a83f86f09dc71214f2fdffaf58b44ffc29028a7" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="a14b98d8b32b60ef4448c596313f35a2d6de38143e2fdbed0f0c50551ed8b9f6" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="e73b5b21eb76ce252fb8682a10e6e7f578e0f6bdccacda7e3210b8d02cbf473e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="763161da6569dd07e7e9d4196878f8cd543bfcf9945a30039330b2851d6fc847" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="f8f819b74d17bc78138388bde106355d209726622d062cd11a87e39f1c3c72d5" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="b0222281ae3f4e82b8d8184e5f8f60909d1266894585c56fb25a71f0f795bb53" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="3f26ce36fd54146ee46306c5f3acfb1442eb8772f36bc8d0201d3174138782f2" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="b9798b404f9dd3cbb87e32ad8755a65b51408ac751e377205a507864fcbbf383" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="e79036fc9860aaa4b8a692f204e47639b5cc10ceb903cb89db7fe2b90f0e9ea7" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="14339950f2d4fc7110635704767a03ea73e6ce20f0245ce849be772e89e2a2c5" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="60f694034dc3bd74490c58f6c4582ab096d026354cb6a9670f40fbd7d688f937" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="f95df560c537b74553dadf3e2cd67104f71f5ae13eec07f9e35e1eacffd3cfff" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="a612b7e35435cb6afb7443683a56d7ebf817b0e4c19a20afaba944468b6149b0" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="4b75cd60c454495e213574bb317256cd3928c776c11891b9965fb5160022fe57" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="2fedfd3e5508bf3c0eabc0043a6b0b74ccfb3e6e2545352406c91cfcf8939a08" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="60640ac010aed89b4a2fc5c3975322b6e086a11292510a1e48e91d0a93f2c670" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="676a2cb3aa72e123d64dd000222402874ab58a11d118620152bb898b655bb539" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="8280a8eed8f25a9b8f64c55856d45ff7de0ecfd1aeb66e750b98b2edbb614ad3" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="8e4be63f29e9d18e42cb8c150d91e2e82b00cbef482e1f7f4df17b5c50bc0b03" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="2757d5c399d2bc7b4582c7a4e796ff13af147bf4ba55154d7a3645f75f4081e9" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="f49f408d8e284e6e441d026b13f7f42a451aa10f8605ecb7cefeb61fe8a3e78d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="3d5d1332efbb713ed7a3b0c201e92bd1174d223df5073525d6bb003a5226a16e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="10ab8fe1af560a3114b947210a79e2879d10154f6d037c76ac010a8de56e947c" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="b0639093ae1affeb44c720f8f3b3d081a3308a92fb6b7eb3c8ff5a0dae01d331" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="ae0d77348f396a489efb1b03740dc0971f13b6c04db7a67bc8fd0c4e31626e73" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="78bdf86cb2e18b5d8b6ed2d3e39c2ef3c60cc0b259d5d1f5dabb5b92fd96383f" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="4d834b57ce2f517c7edc457e5111d6fe3eff2d6e48ae256cf50f60d8339f98d9" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="59027105ca7a0dbdeb206c42e6f54e1d59fc72edda04d95c5e68ba7f2ab4c7a3" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="75cc6ff9d37f036db8cf11cb9d57bfd55e61082289d487adb132cca3cb91cedc" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="bc04e7a7e32a57953a93d0decd6cf21f15fded01e4e230fc03ed86c15e6b468d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="ad21147d95c2f309e651c963daf51a5161d0ef6edfd3b88f015d72d99208eb7e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="d8b50bf035ee090df907078c6a60a03dd8b7c85501456423c3fcfd453b87a594" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="6ebd2be67eaf8bc6d04a02d5329fa6045c51423bef8436b497bd22b2f9d15929" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="f527780a866137552ac7880f88772532018df2e1b9ebaacbef237d3d339cd2a5" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="950032524df2b20682360e4e04a2425bd3a8451e50bed4bd5e7e76822116d10f" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="67bb717caefc29367617f3ce875a80216d937bcd3c15b0f8f532836b305c4790" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="719972a12617c1169f92630167ba1e6974acb34fba6035438ca5e2c110173b7f" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="65626ac76e22cbde1a9f3a67ab1b66a9c5605a5645f8d218d85b7011e4cf2d25" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="7f8e542f83c4431741f537f2ae392d140c26089d083b53257531ca6c2d18c73d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="68d0420512a13ab8e34f6ee6778039c6f009e012f6fe63ed0edf33c36a912c8c" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="50ba83cd62099494559735c74d38e005d598312b09e33fd2324b8a69f8bf5eba" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="8abcd83a34f25ced972775ac682f3d5f5513dc3c359a5a34aca5cad906eb7585" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="b8e72917813df5acbfa7a2dcd4916499d3ce9a741d570190b3bbc9f61ed7c9b8" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="d3f74039a10bc9bc4bf20fb617e0bda64a23a33c5a3608e5c5fe958f7fe874c8" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="db0a5f5cd091246f1334bba6a7f41f7c312c1eae6e2461684a28439426941468" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="5070b1b222d22294d660feca6218448d839a02fe4e2270a9a81893f27adbf634" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="d552b5323054b48100dd7fc4a14a205d14067fda73d4ef58e02b223ca2e472b3" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="fbbba6033dcaeb639622c283e75925bdf6ea67cd22349c7c67f394b01af44792" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="87a196bd70c2ad87c5edc506d4ed180971f25f76ee3777d012ee06e7fe81895e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="70d75abfe01beaa69e852c429a0438d5d0790431ce29068b4b2250e056020503" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="47cb7b34c76c31fcc5b0966055e22c367df4c0c403f57b1b4b06315e5f736965" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="f01d95c9bc14947022e1f3d6b2c22f4bbb1bcfce80ce696f1e82f36003446d2e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="1718b6b75b031cffa84fc2c04ba0d3801a901c9bbe5d428ed98a57ab6e9a8bc3" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="c8a151f2f0fb298ea711dba2369f43b2b5acc1887aded54b213478ad9cc998ce" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="2dd502ab97cb9a904a29ddc98e0873de88cf48907c85f41291f0fb862cf8b054" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="a5a521509ec38bd1a1b9b46ab4563932ccca9c280efbec44104a1fa4e39137c7" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="cf91d34e4abaf097f457f39fffc4afdb4d50c318b1b7763c2c38f8b2907194ca" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="12b05bed81d13e5453d918aac6b02526c702a98f6f8ede7fb84f5f7225d0e245" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="54a00266f7e31f603527efe96865a7910e1977cc8e426e8d57b1c1aab5165d67" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="1d229a0c70c43ead0da10d08be06201efce5ed3a4805251d9cead989a22c25c4" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="70cb53307465519c51b9247c2ee7e572303d887e199eb920979a42458648767a" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="f9206facd83e795772628242c8d17010787259d9f214480f0b2e548b8bb860bb" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="d261cfa174515cebf9627ce0993fcf9ee525b09bbfcbe198a277431ec650a1a4" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="72408207b0d4985ee63bba1bf70a721aa429b49a24aa60bec0e94fb3918393af" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="fccb2a87dc872a8f392a56642e49823167ccc64d481526429009dd1ef8167671" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="f0395e69f1acea4f31df3636ac5dcfd6b418f90348a0acedc48b5b5d0d1f443f" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="4a911dcdfd9fcebd70a9d2e0137a46a041df015fc4659e492e4d4465f2bec004" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="463a4beebecaf7fde972761fe284862d3903538c15874beb8f94a3c465808275" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="5c1eb2809be39200245f97d1ff6e736bcc4ac11185694a841d4d8bdd91c91028" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="58d1ea44460191a24ea57edde81d104f799e43acc7ae93ce1a4194568c4fcb19" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="28350fb2dbfd13a3e47b4387f210d1d5df2133d992a94933b8532b08265d92ca" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="1c07dba01c7dbf6d06aae4d23c9c34e7d931aa5b918a632db6fc862830911475" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="c8a737f7f1abca9b92ea393a6b0746cb098ea5436bfa77810b1c4e141041bb2a" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="4e3980ce66a4ea0594fe75a7c35a12249f45c2478a674a65125f74598871e502" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="cd541bcc8a562cf848ecafc6a1fd998a5e2c3a7771978e443f1f401d227562e9" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="aea863991cd534ffa8b81d75c9fcf0a0b6b60fcb8202f8f6ebff0e8768a65095" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="5839e6f494da4001e4af7e00987182bee754d045018b829ba0871732e47e4988" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="ee4c4448752a38bd25214425595b0c8f7028db8c1470f43c4ab80e7db81271d8" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="2533d5a4f124983ca0def70e6eaf55539899eba9e467054b21a0b3e13a2257f7" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="f00ed8cf81b6f2e818cc06e3102f9f5f1326df1da1812e530e38ef3adda47965" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="c95aa3a61b2f95fc8f78cae2b996077803bc87d66021f28eb05983ee69bdbd92" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="a317301fe48f36f9e44cb9fd58a5f18687373db738c1ce9ad7cc9d16f8a5c16c" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="7bf2b0ac302cbac111c6fb57b2031f761a14feb1a31954a6eae259bf61991021" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="a63673992eb879e8433d92f7650d231b7bc822e5c870ce4f2188a7bd0f9a4ae3" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="4f74027510896912404592d4985038a9016ed1a1da7e1ded13ad42ebe2ca5efd" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="ad69b97df41365c15a7ef5ddf236fd8e8696829ebca36748173e30d5f3d9723d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="a51e70fb1e67d6cad42144f577b5251094566b03478f5584c0c6fb07aa934409" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="e8077f9b8463e9a9703e39984e5af34231719b59a44d335b364d4f8551733e38" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="9c5b4524f48b876ef99f7ae5029d2c8dbb1318d328e4bcb0d8829f9e35a23070" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="dc4f18f05c367cbea061eebf3b099e783979060131f3cdd55f4680947da1b9a9" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="beb2c808e85cc8ce296c78db177a2c7dfb0f61e96bdb3d718d409f1af42607e0" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="8f388c1090aa6e011c95715be41914d09586a70cf96ba01f1f08f0a373e6a7fb" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="097cb9d1d46ae4b2cb52f1ef34aa3f8b9c697efef29b88443c6881f8867aa037" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="da4b165722148a71316f2f201a950e420f0d4fefe55d02c65b6da4ad3f55edc0" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="ba713257e9c8623286be8b7ba20764e83559d22b094d45e9f22ddd4a259c8434" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="a2d1bdd6623098f1dd56632b3489f82612a9399c083cb682358187640af1016e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="2321fd7baaab14cd23d1f5077f434bc061e7bc1864772cadb688c238c74b4cbb" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="7f539dfa8b4b02decd765de549f65696eebe5b092d2e7f21454f5506333104b6" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="4e5c8a7598999f9c3dc7d9d87e7c85a91172bce0f61329b8146fb53510c44812" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="f6f38176e556eeee47c4f100a0c5a9c0b479a7b088a13605efda557a00f6da7e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="e7a2bc69c8aaeb8ae20d7bd08592e438440388013a419480f82346dc44bcab3b" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="9ee5309a06dce567b76325cdda477b98200b22b9f22293f278987e28e1f6292a" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="a8d7a2419b98f9c6a6b0a4e0e417807261f1fd76b578a6286b694537c1dbfd1d" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="146681c1642535fcb12423a5e8083bd2cdde02038a6f509561f792448a491afb" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="36061667fafce6ed75af586c63d7a3f3909ca7fb65fc390844ca8f8754cf2d03" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="cc097445bb446e6a4841d16f45f33662aeb044bab0051834bf9f3e691bbb7b63" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="531b76a3ce2b617250a3e35528eec8dde76d39fc3e038fcf2c6089765098c086" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="3e39511a98ff55b53dae93d21d7e5edc39b90560e5416d0b148b110047d8f07a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="b863741bc15015e1679838d33f768540aebaf9ec309f7e25739f2d29ff28f81d" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="d0d7397ff233ec4369342c6fcdc0f62ca6827eb31dac198aedcd7e7fe938c8b3" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="07eeacdc9bec274d984cb24a5d1141998d95a292050c3237df8d5d0f68aea62d" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="9192e0862e1dd1ecd4859e7d9a40fbe626c336b01a4d4f31090725eed32a7d34" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="74abef2dd8d951d97739e3e18a50eb79255640515c21cd8935df5413b79b0241" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="62952ab8cb571262a601f73e1108f32e3790a00ee4871ef5a70f2c11ae997afd" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="16fa0d66cc88d59bc467903c61b8e6fa0746d5d92edf513819195f2378549fb7" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="df149e6a70bfd92904a3e833e2edc92fc29615ab826cb508373b58c7df2b7c48" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="543c9dacf42c77b236a7e9b51bc3bd70a6cf0fbc58c7c1ad392652f85781e22f" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="6fcd9936e1b231bc01c8093d8af2828e633880309843a0d6a22649bfb47513ca" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="b3a7e4147effceda8289fcb818e4328b382652ec9d02786d856c0f3b72af1969" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="146ddefbf5e0eaf48854d36100ecfdaa027d68030c2349c4a00b8f3a6ec94818" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="04902d5b0c15ba378fc61f9b75d4b67bf400f1bf19ef4e5df034611838d09335" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="161184962401af48475982bfbdf4740fad474bbdd622e8bc852add7f5eb03e28" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="7471a52bbd9fcf981b828db183b1ef6741dd88c3e2a6cc99f73feda56717e383" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="6cd57da54b96fa49bb59eba5368ef7ef61e24861ea138d05a6d40cfb69a3312e" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="782bda03de2f4db66c715b1455a920f06f65bab28c4010794676f2513ffc69b2" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="accccba9627312177be5a374523b5b6334e172a49c139ba738eebeda332cbefa" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="5093fe1ee249f6ebd2e683c8086f551085a08e493327133491fc8d41b3d5813c" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="e992505308f66f833690e757b348879c7127a05c2a02115c783cb8953efc9f1f" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="dd28d20b4a540865723d4cfb71eb5814521826180249c0bd5a991bee380a5f33" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="09e69da85b9bf8bbd72b27f5752bfba8158ba6b4c8d1fab328b276af8aebbe4d" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="dde9c23249b583c5b93c01b84341f2c5f878d3deb23af1c571e820a7311fbd46" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="6be7cd83bb8ba4ee1949c81a11c63969664d0d3dab8ceb940b965e6f628dc533" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="cf102c84b8221e159993d622ae3b679e67d4e1d2fd264d6ec628bad3d82327e6" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="accd4e9835cad2d9ff1c5a24768fa1bbd6b88ce0254505ad426d7f3da22cc762" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="9dee3b88d232581fa1c68af94fbbb6621480b50d72cdac01f18b06277d1af1e0" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="a622c6ca4381a0ba645bd2c1ccceb5c3626e8de6843ef16da36f04f92d438b38" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="d8024d36e62b3554f76758face724a994eecf78551a404ba29dcea8b827c9987" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="4348e505fff30cd92b946ca7d240b9c70efb8e0c91e233a552e0a66e67df8692" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="d5160a87799846b5e7e15c23437bdd0492a3a125f058e74ce91ddb27e04fd4a6" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="d79fff7272c631df4426cacb3755b49985caeb90b9d3ceeef69550f351321148" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="865e909e6d577522ffd10eb95256b8f7a8b4f54c12c78f17c0087762eca2bb3f" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="cd68c0d3cb3c93371eb0c973396addde5e1828ea5612485996a35eab34f29410" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="4b0fb5d77b0c1d7c1ee6772b2b75b3805e30f33fe6fb9607bb59ea347bc7b0c8" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="8de2ecc4e7a79fd6ac9f15672e874d42b5c8f759eccf72f72a00213e7aca780b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="9eae7066445b73e4e399eb0ce295133f93c048aa917ef68e7b5095a7dd02d7a2" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="784591137f2c1c7b5c41164e1aef5ca769524e8c08e938273046be33aa7d47bd" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="982d495ce2ed39c3fa489c02bc0bc2d2a69515838b924645c084fa4f3c0c1de3" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="7adffed0ce7bd0a37ecd98e7d5cb93930a557502eab76afca495961aad0e5d04" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="65ab1a502b3962fec50c0e174d66d6588656ba3c1169a9a6f1515b8843d20865" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="8df2909df510da574fda40838ba01d432e23ea624881f45b647181bafe70641e" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="62994f5fdffe00cb4472ac906651cfd6b69ee0c925fad500b29ff23477d28b4a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="5e1f062606894b649bd461beb02130284de71dc14236438e0bb9aae4c201b855" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="d2e220251c15c240cd6d21d1f06fd1a5f823b23cfc6e43c4e2443215d9197d09" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="94a721a373baa45b00a4bb0508139e920ff0cb7eba60f100dfd8e0ee71f36020" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="c333fad67eea2be282970d2c9dd8e9262ecd7a8a84b8e62c520c59f3371cf465" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="8e6db3f80fc4f0fdc65af29e326f5a8beaaae26495402acaf6e49374dafb8688" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="ed33ea09fa85f3dc3c2a1ff5de6c5ceae3dc6988e34b102c4ece7d751c1bc5be" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="4be817ca3c3a1207e472d2a117900ed9d2d8d4265725964fa4e8b27fe9e2416b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="d6b02fb73b5b9c5d996c7fce6bc36db6ace25b803f296946453690fe1204998a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="d48f4203d0f2c42d2124d95bc0465f6866d622487d790c06eb103642680b378b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="ed9077f4c03af4e5e4d9de18cc5e64c456393087549fbad1f2bd44e496241be8" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="a1db14c3eeffaa50b6f72b06739394ceb6efce383f47736dddda5582ed856b94" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="d52990758e302b653472d99396dee1560d0c703002567d7a4ec19cd816d9cdc7" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="9d1858e38f61fd23cd23630882369f621b81775f0ff1f750a7d4c86a6a201445" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="482ca760371e88aba706a616e779d91af6018f494ab76a2e7050ee4788564481" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="dd9ccdc2f0caeef3d7e68a0f23f31025a8ed8da06116d774cb62df285951a7e1" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="36f8d727b445b76de1985d8ffe9cd38edeca9f6aa90372373b049c02eac7399d" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="b3bf5148f5c3b6c081eaf50eea6fba02d9cec203bac89431c2100995eadf581b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="15e259fa3364425cb29274482c32a4b6303e5e69965e30f48f370be7b387e067" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="9b7dca8b9ce0797e299008f2a4451a48b5ff9865043fa35bfcc27392f9e82283" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="7ae20e2a6c8d7e318da6bfd597f22ea5bdb79a13808504b07bff295aa3fdeb0b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="efe3ab5fc72c7cd8923474d4cc55ab67e7f20c9fab1b7a50d12aedf3e8c02bb0" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="61876fcfda9f802021cd022a71f9c94cd2b7c43a9c81b22dd47406ea5c0e7c66" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="d5652a5fe86b768aadff0f12a023bf361f4aa4cf8e06b35b3da216c8b949c304" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="61013b1a2f3e980177116d35b3c0de02b71c3b144efa12c8cccbfe06e068785a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="355a72255d05a94c16c6f23975353fe0f91bd18e77eb63d4a3ac8bb9b3a4e4e3" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="17461fcc6bbdc0fd1fd2a6cf0a7316d22a65badba3899c05f1d3ff2e3952d9d1" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="517b35599620a601d65f7d9a95d0fce73b7bf4e50a307e7bab6664a63a1722b9" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="b91fd9a99c5401a14ba1752d16ad9ed3b1b296df5537a39bf0218fdf4c02e1a1" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="001471c486084163de89036a1edac3f145900d273ceaa77b57098b2907c73aa8" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="212116f34f6a692d63cebbec5550e549c2d5f089298cae709b31699f4fd28482" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="0e5277190d1467994a07ef9d9f53c6fd19d9425d6788c28d12e83fe52e65404f" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="acdb5d1729084603e7fe7b36ff421b2212cba5f2c63bf0b3a7f138aee5a5fb6e" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="0c64b0eb2bcb4011711da2d8361b431b20bb27b8fd001c60900a2830355b371b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="d6d7e036f65f737f2ee5c1d5d779f209020bb451421caaaa0d6f4d4f68649a29" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="6ce13d40b335501e10edcf530182d5f89262957f7d893ff0e0acc9e66711cd1d" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="9855eae1f0fa07d25479b4b94c8323641fa114fa54302c9a425c36d0ff009952" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="ec3b6a5becf5346e514f4724669615f6d5ee56b659b43ce09f674800bd96bba6" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="6c97b463d441461bf4477d49f57800cd79f3cb8a9e09f1064543f0bb1e10211c" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="0b037f681d915d57b86ba11a2fd44a9e88e5f1d191b331cb7da84771881d7537" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="93725ffbb0bc1a50c2fdf38fd30fbd2b7cbb76b2f67594d8ac00a87706b7f642" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="0c75dd68b977b070aefefcd670b516fd565630d780338eaa30ab63266c995ee0" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="f9f96a90ea806836d1d53a5817d6d8496868f3959ad8be1c827846948f87396a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="4c65e20ed1afea8b200858911be6a1d73e213b6e041502d8e9382ed01817580b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="4a55eeb87af94423e6afb2550a31222a74300870c83fef8fda4a5c3a29d4e37e" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="05dd38935d196bbce0cfc4f0d64e2023866118e8ece84ec3f17147e70e3f02f6" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="933054b21e7ab343c9708fa5c87f2fd9e74085a23700de810ab08e7e6df3bf5e" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="7b866de39a078d57ac0d7707bbaecd734faf8bba620114c41cf6425e6eee09d4" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="e5138b11049ac126f899fb7f3cc35e79e6e84666f0c38426d31ba8ca23c9378f" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="d3f73ce29640be64e22fe660731b6dea7e81077e610cd431dc332b809aadd3c3" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="e835302259e5261ef5b3548d0969fbb4288f33f28463cae83b314374acdd2f8c" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="4eb53a13c09befde64b1a51bcf0c0dc432e293522dcf0cc570bc7cb586500567" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="ce1a5f6695d012b84ab2b51ce31c9bdbf40927bdc7afffb1720bcdd1a4dd0eb7" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="997d2f3bfe308b92c8dfc5239ff1c83363693662195e1a950b08f31d168f828b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="70e381f0be37e2c4d2129bd2755d98fe8fc8f6224f0dd5cf9d2d26dde24708e0" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="bac926c7ad1d2f03aceb2335672467702cf43d1b37d1c9e3f03f402810fd03cd" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="90264456d59a101cdc0228922b9ea2ac10fca7abda42b06f656f0489d991dd6e" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="26d364c553fbfb4388702eb43e4203abba57b74bea50f4f51db31e7d879f201d" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="6c525637398135692ed7ab53115f1031e4c2fbe4f43af2a86d5a528978b7e3cf" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="9ad8d5db75784468813763786f36b8a406858dbb465ffc2eb5b61d1de4d9dfd4" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="2d73d081512c3d0bb5773b5d184e550d404b06e31fca4670fc2e5d1d7a66b4ad" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="202a675d993d02f9de48814cd77e58befc0258bf392d266f500a0ce8a31f4e97" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="0ab05404e6941fee5c7e1b166866a8d3e203650c038568ad11e299ee5aa5b92a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="d144c971dbefb72cec1bfe805d931fb5f9db79cb09a6bbdb14dc115544ba7386" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="9fd98439720145aad6f4464b47e3609cdbbbb3c11d02721a5b2b45803cfc53f1" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="0225ae3b02bff37447a688da5050a65d79de2a350818bf438960ed026f7de158" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="316f0333775e1feb2bb9646bb67695cc71c7f8e5fa9be574b274506281765512" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="0512fddf559d08ce6506d42de40dbc6787b81275f7165200865c4af33ff571d9" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="25a757f3d772f349add7682cba4534f7bcb0fcf8d9dae3af079e5bb36b19d297" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="f8267754600a97a4414e4226003df2c5ff05a15ccb1809ab975cc76fac75b6bf" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="6b8a7e1d25c9e9d764182e8a4cf36a995573fbbd6df7ad3e93012659877a25d7" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="a566d4bad8ee2a831feefeec0b35da8b47d879c8b2e4725aebe1db3af0c18067" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="8ef6104948f0ad61064a1d87a12cc28cb763b079bda0ed28a3d197b8dd9ae06b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="1ef0579b3bd3a07d22166d0792524dfff27c6b284cc505e33eb16b4928cd84ab" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="621add49551ed32d844aa2011bfadb563c02e896437f824b1015be64a67176fc" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="c420623cad154ca1ec3a4c1d69384c09a69ff4729eedf00592e7447ab54b6f06" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="71c3fdd25fdadcdda81e0b9b62024d5fb39b7030c1bb282150a5832485cddf73" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="3eadc879d0dff13b653b68519d467779c2150afcca2ffa0d6b353feda11395f2" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="8cb89734b5157707323764f7873c094fe7ea576e2e634102f45343f717e68778" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="c8475d9f0f06796f26b366ea572a8feeb54cfec32d395cf6faa1cd306506904f" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="47ae302513d83ec25fafb1a1b98dd8d30affb8394e141814d11b6f0ea2b28e7c" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="55b0b2f7b1d5175f39653d9763ee6f4240fc3d05f1ee9a9ebb80ff39f36e4ad8" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="a68789f4fc951e0c520a92a123eaf2b7134b60fc9dcdff5caca6b65183ede1f5" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="e6593c62d86c9d8cabbd22d378c865c41aebc676463a4a10872e4f925bae0ce3" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="abd2e107c5f3691aca4a18891cd92218238a89c283c915eda5b32d480d01bea9" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="5ea243759273fbcf57964bf4401060ae3bcdfc7a4d9d7fc4ec63e9300a6807ab" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="82a5e4ffd3dc337e923350a421398ea2168b0fb350bc75ddb522967707cbc00b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="9541e30b756a2a56afffe1ddb4f9a7f86ea877d792ce5284cb08ccaa56a2df8e" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="8490b1dd4b2e5e90da8f56ec4b42137215c46d939d236a9c9b65f52f5fe6d99a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="1822bd703b4b14c42ec79aeec0a87bca9948c102db71cf84ed4fbdea64d9fd7e" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="d63f0242051b71e66f2a81fb8f326c6a77013cc548ed0b3447c0cd43888f8cb1" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="ae4cf554466f6df8cf27742077eff4e3b81d8706e28767e41a068dae7cb277dc" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="700393ff1f066d490e7288ec7bae0c18a1feb1389d4f950d399e8e0e54186c0d" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="c3b071824435c73c95158f2bfc1ef0c21a2e43c7467c46acfb3497252a96744e" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="cf68a97332bb54fefbf12ee8703bc9fa52d3cbeba33f04f3869369c7e2016bb5" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="9d18cf4312ac8adc42142981e1daf53dbb1b42d1a75caf116469eb2f2e2bd791" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="bf1081402a1055f8cb5e36972ea3619ab3c2a236fafb59757247e5376baa07fd" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="d4c4f78c4849e8208b2610e6c0055669195d81bd0bedc590e5194e361fe7e0c4" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="e9006880c1b0a2ed7a825afa6d9ba84b4cf6798487c705f606af041394a3b5f9" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="bea86a7510a28b1d8319200bfc3730d66ca045d96126a67c78f3ba7ee7391cb8" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="3d438a9eddf6d42271be653076096a0b684ba8141e6a13921ac024873adc7585" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="88561d38fc69207e5e5610ea2b0629e0e777f426de3a6446f08c8a8f4a257114" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="2b319c83542a07b833149c61731686550d419a8823e033aa1ac7f0bb5ed9daf3" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="825368180603b4a8d4b11cc8d953b9cf84286185e3625ddf2ddf753ae307bc64" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="e27958e5a656513f32a0969aefe0b9822166fe2ae4cea748839eeedbf6231852" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="230fe2c13536d86a81b3f2f36c28c45783a858bec6ea4ad869b6b2e937b6ff32" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="dba8152db510b9d66ea938a1712cb42ac6df348357ca9b9804bc7aff5df47983" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="430560944bace79a4317b76bacc31b24f3d24469e4a99d10e7430c7a692a16e2" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="ab3e117e323f6061866097e58d5a41572669c04fd8742d87aca4d1be9f7f2621" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="4d1a3c77bf3513a9e3fc684a51f041e4a33c0ead5d70372f98aa8f1dbc2866ac" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="723e371ea4c9aaf94a3cb61c9bc26d67a8807c7f587037209366f9159815b0cd" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="184a84d545bd71a92fe5aed3cc30d2445a6d1499a5e579c7ca65415dca4c89ae" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="8596c6b0f977c09fde62d12ad07bca248752a415dc0753a8e42a6be89c9a0b95" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="69e7985bd4d0352c251b7d0f1cb02c45deff1782b9b42605124e908753335cf6" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="fce0ee6d02f55439f79b2191dc0758576376cc8caaefc4b8fcdcdb2bc8a56dde" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="f89889a8ea8499886c332e1f304c606ffae36b515714e737f82ab2eb52ea5a6a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="6d808963c65b23531eac71fe90f8c6eb21b7ab4cfaff66bff1ff362c5e09c28d" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="0acca5c53aa9569189479462c38baa8cbbae299dd173a98f47291d6884612094" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="7f8060a44adf9f5c59dd28421d87c5c3fced6c5907d399cce6f36e6d52ce97ec" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="2f8924c89d4a654c7ce82aa2883f29e1d91ab358018553493877227fdd3b2f15" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="0f7ff8c082c00f2dbbae63cf0d8a043576d50c49b604e38365bbb1925bd059b7" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="48a2d76abac6f288614064f0a9de61eb037c07aeaa948bc99a5d48231a3d608e" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="8c30a0e9cb979a69aa90cd9e3fb0871c693a1eccede8fe18f99562ad9a4b7642" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="e0877506df17a3e1ff993b82d0cb4527744120e2abf4ea10a305bb1d3cda5850" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="176158bdd9a203353d839fb54fbae0e960f773ebc16f34b472c6feb02c2b9f0f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="85a6023a0136110c4c5f35de3896d31dbf4c239bcc0dbec3da744df36c004dbc" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="2a0ff564b2be2c776f3728220073a27a9fd7bf66b0b625a46dc2a1fc8beb1284" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="637ea368690a0f283ff04ef36125f3a4ee608edfcec9e33806c62a5d9c22a40a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="fa868d14b9e88885078eed9439bb3cee0550c96f1eb5130c4a7afdfcf9fea366" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="dfc4028975addbf9541ec5aa50d72b3c4cd8e3c0bf4ac11cfb452612f96be9ee" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="96e308a12944ffa448b7a5df600eabe7659ba5aeee5f484b79ccb61e649b2378" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="5312fd330d5cc6e99b81f3709b88cce0d1c4ac90cf4868603482a13dcc439113" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="33ac8c02a6401f7ff30b459a070e7fca99b1eeb6339b3e61a2030aec46013054" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="aaeed5da367628ef6de8e4de013d74beb76b6970287fa9e887681a81f78706ad" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="eb931346dbe3cd1dae29e7827df0490c488925677a6870f7adf5d7b767054bb0" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="89d719d1dcf474f042d09cdefb6f2ff5b16b6cdb9d5ca42440bd3a9d59cae78b" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="849306c75a4d19870a957f34fcc7bf8cc5a4d63818f8a905315ccfd01b55e7dd" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="0f566e9ec7f7cc4c273877251b1ec5fb5ca4729c3af5c18c43f17f523e39e3ba" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="c6238d114df08446154d503355715daf987e550104dfa6aba031eb90eed04899" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="7ee97a4e8baaee618975549d16c209b17c81b491e29e5ebc855073355b9da403" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="fc8ab68e066add73c3f76130687fdd726b1ff4c6955b55c6fd6690169a7a7058" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="45cd07c47bf0b874d1f1ba37913165fc49a86221f031efc7aa6823b083a8cf5d" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="4c0db307a8c6824438eb932164a3fd622781426b7f71f4903b0ef78c8e562c89" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="70bf55aa40465b8a26da161868694fba01ebb1207cc972e3d399a307120c0d9c" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="5d4786cfadcb12e0be5539f8c6a178a085bbf13a521f1ddb510e09789c9ac3b4" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="21c91e6f998cd9318594e279386ce021df47724fe08332fc9ead318c92f3a1ac" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="adebf8bbb77241f90d4c538eb0c03e1cb0887e31f8e269fc097eebeccd6d7d3d" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="631fe4dc38081d77fa394d4b2331e0d33b7cf54533dd1349dfb5bc3d30760b69" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="748437c6c2475c60df28d3044ac1c1680c4635013116897465ed34394f091d7a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="b8309488cbcae9232924ceb345f7e2a4d037a88e4c08f3a177509c7e938aba59" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="c88e85e188d295b5c140c6f52951841880f5dde243cbd7bdb5821237a7d8076f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="ccd39da5d733072174f1740921ab7b790ecc32f017ee825261887f4b14818f62" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="74ddf0359877605fa1c34949903754cf913f665da5a972260b58f904050d60c5" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="45344ec27822a06b2912f7d19b0a33ac33decbfc28f1c6741f8a1d54f66421a9" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="e71d094aadfc810ba59002255a84555557dcbd46db1183aab0bb787dbd1401f1" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="db76da68668d62c420d8773f98ac6da2490d4da81eab00238cf52f26336df7eb" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="346bc384477ebdca57fec9d035c790e608478b194d4e81c6dd203f9e0742b4e9" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="13392b5c2a21648783eb12bb2c0303dba625f70582b150c0244b76f5c305359b" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="01ab381a966b0ab2087b7c3022547f8ef4616b72984f47b7f868cd53a10bc7c5" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="58bef4b2315a0b1f89c6fa92df31de73bbc0b7a288e863ce399261a40862a764" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="a720b0cd4137893f5b637d1159ed00b7d16a7fd7b0d24958158d28d20db7ff1a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="73a7736fcf9fc7d3ba952f61017fbe75227b7e1ac41f489ab4a46c4b1ca36f05" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="554b2afbadf637f831e6141e87b794337177b8accd686c262202ef63740e5f7f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="d644c24a37b45d094d77a5a207978b975954d6cd2f969e57498199d0dc7384d2" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="83d511c8a67c8e567b4e5b3d2f5b712210a3e7710268cdffd20bde686e8c87e5" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="56f2b1098ab83c838f7049a0d07f9451c701c1e810b05e799741937cd073c52b" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="32e316863da3c3c1a7a6e5c6a4c9b364671e261eb31e8092865e9fe3cb79bbe6" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="9ff42c0766e598e775efc0441c8f0b5bfcb64ccefdb61f4d0f4bafd36da245d9" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="144d9ea0aeb2c82eb0e32650224c0d8a1e7cfbe277ddd7eca2a62dfca3cc760a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="af7ec7b9311c21d94ba2d08a745054867f1aad188e3542b330c9c64fa0cf4f67" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="5e04dea7fa00aa66e975cb37daf1ab74a642d10871d4799bc327685f16bd7223" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="d6c7c7c3a048a2fee64d0a4e2b3f0fd4550e46f3634211ece181f45cff4e042c" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="512bd85ccd4020eb251d2df8e0b1ca99ba647dd1f19ccdf3bdbd2ccdb1e92c73" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="3c29c740d439130947fcff29e428329749cbec6ccfe0ec27b1f361504586ba75" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="d8e1d6841281d73b0a0b6f97d31352ac26cde8c81da5ef262200f9f8366c82c3" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="c1e3fa55a58b46217192d83e7adbed6908e6bf1ca26884ab08478806d7ad3b55" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="51a3d56ebc13ad5188c0b5cd1dbb72120e5727b43f4aa77926e617bba560ef2a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="a573204b0a4747da1d9c3fc37390fe3d2857a55eac671edaffa073cd7c88b5b3" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="f8ee94325250c4593d74e805887457bde2a694bf0560a58207311111c6f19c76" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="e82f5d58be3eabbc31e2913c5a7aa2d97b5724820107e9df846ae26b3b76f010" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="8729ce98d31471cc00ea8bfd4e3fd624690ff393486d0b4082aa8d02c69055c3" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="b4d175886953e6ea5f10cd3de43d1962fe3ad8bc613df489cd26489fc069a8a6" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="906fa8838902cd994a07498aa3c11cc0c864d7c53189a19fada3b5636520a494" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="6bdf56787b268bb4fe2c47c76ac657dd60e5ebbd9c9825a5ef4023931706348a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="1c577a27e42d2e2dec379b1618c2fac42ec6ab4708c76a2410ee8e029690f0fe" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="70b4660af847c20bdf317f756d5e4d26e0523890324922cbeb88d1a87d8c0ee9" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="a0179b46c8cf673a080a388d897259480f49ea6dce6b8b19b7c2f74ac69c9fed" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="e51fea9dfd230fc3195339fa390283ff8a621192e75992be54b93ddad9a7fadc" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="5ee16b050db727ab44f519a8e84fa092d657d409397f8a2666d59cf0ce60cc1f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="e50d574752176830d02e886ec8f95c9189489dea816522370c034df92b61340f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="7f95393c2fe81b7a95e5c74d410265cd4a3b7cfb5245cf5d6c096ff937d2bea6" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="53d0a029866bb6324b87ee940498aa93a79e904f51889ffa4b1a79f64da77a86" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="ea71245e1f225aef52a28cc6d796316bf3062233b403cc407522453b3c11bde3" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="6d89b1d181da041987757b12ce9c26aa43e7422a008a0c28c160286d0baa06fd" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="84812aa7eb86dcb2f2cf7d143209f818256b6f73a7d50019ced6a93197539621" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="de95d07adbcee31599e603e2b63adbd36afb4813f07c4d0a6912f01c50be24c1" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="8c9569244c34ee9ac0b83b527d51dbbc6fd984af2f967ce2cdaa9147919c7131" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="e4df77f6f7bfcd54a31187b5ba4b6f1dba18ef4cb19cf031cf7d1ec3637a5db5" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="63972f2b53e8944031074c75f3aa24550d32c32010b61b5c3b6eb41d8b127cbc" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="7e0410331c6604c2902e20d0629baf05839dbda184adefaa2bef65cfe59656a5" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="51c7a1b3ffc67513dc3dd373cfe1b0dcb8e75c064faaee39680363265e0f68c1" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="3853fe555b2e75710cf2c024fa8c4a1bff40e82aa72170f3c9feb687492e45ac" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="c05493eb3135c75018432aefc06f700236ca0b18f688a8e0106082989de7fb6d" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="6e0071c5af19f506193e00c8625c494ac5ba5d37f2bd34037b7c37c42aa460d4" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="3f5b78eaf3384dac345e0faa01e9b38689de31e8afb99addf1b22bcd7a593b8a" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="b88924948b5de3d0ca0f8ddfb7de05117215be6becb5cfae9d5a794c4d7223fd" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="a22edac85e5d7da3ad880214e9652c7f4d63a6bd47e65a2ee3f842e283958227" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="aee8f4ee742eefdde869f1bd3012f6d976ed6c8b8c987031b15a9f1dc8879f42" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="4211fe799ca08fddfe41027d521979245e001442d119f1d9922267cfee51235a" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="b01c3d3d60ccd4ce10af21150e99e14536d60886bfbcb27b4da602e4ea42ae7f" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="b6f5c02f622df3e2706486875a2e25f841cfbc6738c90eebb2099419b02c5b57" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="2cdcb8443986b07013ecc1c5ad1660ad16e9b3c8057899128c9144f46e963b66" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="4a50bea2de4390252b46ca7b76bb38f3884c4af4a6b132ad37fcd67dcbed012e" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="de2768f6bac49a9338f1f019486d5b093cf2e3b39e54ce53a4328501c1215f49" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="a18623614c52b8b84ebbfcf9aa72c83fb3b79a962b2405ada9b73c2ddb37eb8f" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="c7b1207757555ee3679427e5ae05a31b8655e00578d1f29fcf701d7165e9b0be" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="1fe96957c11296e6f568499c15b3faf05cad482a3cc855d9cad861dee8910a21" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="a98a5758c3319a5f11c7cc078453779c3ff605985c1a5bda21824431987aa53a" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="728292f56a7eabe83fe7644439cad9dde95aac3f34481c910551d6ecf7ad63a7" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="8a0931713556fa6b72214e55f3f3062414b125bcae9c5d79be435c9bd8d486a2" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="1302a7a88d4d20cd6b66df97d8d5c3725430b6b1060cfd62ab76b652e6bcc897" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="ce9bafe0ec63ea396209c464de9523b724844fef6a03da5be169e14a95f11ec6" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="aba91788bbab6e89cd97ec1239c8b74cbef1c4308aa14728482da33858c5c606" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="b0254b9530ac0bc42f0a67990602d79257ce9e5e1f5d9bdef9b67fc902d520e7" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="82991d879b4c8739faec39293c59b31121c7df2a6b276a88874da7ed1f846de1" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="8cb35972b96a2d88f1ba4c3e39b2d45827f817b089a295f759aa1082cfda52b9" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="9d0cdeaf4edda1eb7a0c84475ed3c1e382f13d44912e6b7c4ed09169b6477140" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="54c2b37e1743000df5a6a5b984bb577f8640e4a888dea13eee641b3e1667c392" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="32c1a1f65e07840167dfd333a1084ed11df45d4c8e4bcfc64ff5e6baef787aa0" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="536f669247fe7478406c1a3aca17133082b8215f5e8bf88b3a991daca4808011" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="5518b22067a3585482bd3f783b458bd17493e46fd4f4250850dcf656d08186db" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="5490a43f963dd49a36e0adc0cc89298b1cc0d86c0468fd324630705514be8216" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="ca1403f495003dbfb55479334765362ffbe24bc39d3e91b1fa667467726b4c9d" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="023dc46c64b0f5c1a07242723685b305b3b1dd6ba857a087f87de89ac6214f05" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="4a613cad7805e8313fcd96e8d3769bac7f350c385560908782362e2ba8793826" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="3af2e0278281cd1d00948059e751e52dc08f7e70ef0eedef91a19d38ce104e56" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="6980186b92b78a9cb94a7355556fc1096629a791a7db8ffce819ac88c1bdc7d0" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="28414288feffcdd4532a29f8e90bfb91f914d2befa7afd2dc5e59a6da553f129" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="be76c28827b54c2611256423b7b870c9ffb2564e5ec8c4068d0b69b2b87a433b" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="7ca84ccbe9fe14c3237b6c1b0f16fec932201ff5a2132eb089b1573001a9ecbe" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="cf47acd25165111b56248e3aa1884d346365f3190f8f674178d3c8cb22af3b64" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="1b1b6a57f5dd860a0fadba9e66aa8e9d74748aeb5aedd1d388e4d05975b63ff6" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="27be55d30f30ebc0d494296d1180cfad85710bf2e81e59c1ca5166555752ff13" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="f45c8500bb932f2884cd0e1500e56285ec2f60f56ab6c1b82b5cfd464abbfd54" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="5b59dde7e57ded9c4ed0527e1304c2d822df63f2b680120da36d4e120b9ad317" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="43255a2e38bbcb91313bdc9b91cbe5ac71cecc9f0ed1c0818431264f72b8ebea" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="0ca8737ed6c3511902fdd3b18205446f69a8c257f98ecd6ed6bb74cd474f1fef" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="bc32cc6303555ebab282b61650c0b99768ff549d8715abc9ea052d7280b94df7" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="906c877dc7d74318afe05e1c33d2b8550aaa7c49b7c700ff4f95dc755aa7813a" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="d7dd5503e93ef1dcc0e44f2994f4615cd4068b05d47db4fe39839f267c6af593" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="f4e827a20d85423c47b8f381b55b3061b078c862aac1c09831ac46b9fd9e7ab7" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="c2ca2fda43a5f000d275bb9a82dae7801600e573180e2a897929ad53ae46fcdd" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="30033ae0dd563c971dd953f8874d111557f8ba3a2c05ee4b12acd391e22612cc" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="47e3bbd9eb6cf031180efa2c7a5960a81c1007fa4da953c727c06877c3604e93" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="fbff9f3d0f2dd10a200eda1dd1558b51bc5bddbf79f9568ccc52a1e78c71fa0e" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="2bb408e5cac77407d505654537dc9340a8cda5352b027de3416c66c1681c5313" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="2f993669e19610f983cb63b3daf94c0de08f2d9096e47d6e4c9d79b356f48ce4" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="be114a306adb722871cf28df297d3daf55118f7ba1bc3ad240db99be905e7a8a" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="0a6053e75f61db6116d33b2a0d21f2a44438ed1386db60558ef889e93ae63cd5" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="830cb8b5613f41c426f6d5e0e4dfcec9ad5cc8cce3b31a2f8e2611efad384f47" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="d9061c62744948abcfff9117a093ca922f223a11003d865342b2af61fa19a5e3" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="b3143d62c02e58b124afb17023cd3fe338141b540e87f59f3313b7040a8d029d" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="b61a3ff9be7aaefddde71a258537862e49e9b08175049f30dd85e42c1e5c4d78" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="a023b8d5de32e7325b719c8c9d1c0e62149d91077b1c4fe78950dcf18ce58112" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="665d9d030f1a90c4fdb4ca28975530b649866408e8d393920318ba16ade07b53" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="df2b5f13d981424bd31fb11bc6049d1945eab25b834c100a0c0736fa02e0a232" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="2cb4915580b42b6865e2c3ec70125b0ec5b8b464c099683f7154357ced620324" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="8ca60f1544b22015f6c82e33b6764a80304f6a185a8a1bbb6a3332a168e845fd" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="8e897d37f5deb232e545131748279901a83e100957bdad20fa105d20c6ecec75" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="85b30d6c62c7b7d17bed7a386de93c800c5e7c17021eddc464173865f4d3e947" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="aea8ff6d5a1aa853c7427f7fabbb7393ddeaa0d476d3547c1dd6d1d51d5bb3b7" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="87c159a36814810bed75e0851d57b36d00a2cef9ab809aa9ffa4dd3f885b7436" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="c79abd971695f84cd4ff95269b949121cb65e34f5b7c4fc28e53471ff940833e" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="760400e0d5faedb42c24911b3bc4409caef465e35638f42b00c6aa03b0f6bf31" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="5f41ba5c671457e7564bad0a74eab8b9d2edb4e39c10d3ab873a9105134a9fe9" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="ad9a26ba79181fe43d4304c9a5c235c07fbeb7dfd11f20d487a156f5f0be67b8" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="2bd32eac1906ff414e02efc3f6ae7a7072aea4b8e4b12f3523244dfa616f1fde" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="31678e32aa6be1fbc19485722276ebcc565d30e9e908dc2d2636465a516e6aff" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="ecf886a7ee2b771747da6eaa950de800ea21a1b9d7dedd5fe2e1a8c2f440ec42" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="3a5391557423119cea7ecbb195ddd6556bbea3c7cc5e398cb809a9272776b407" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="afe190304784df5ce16f03f43742d8e0c406933369016c05308314bf7ece5fec" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="bce992199445eaf038740f8993fa0c41d245f429b54a0da7a12d6a443f486792" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="d4b45057d230766e43cdab74e338e1bd64afc93b8353e9f1c7628fe6884eb5eb" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="5810ac4fb7d8ac66c8d19996d7a69755ef9f1be5ca5a6d55dda3ee47112d5fcf" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="70c2a4df29d0856e77e3ed34a1f7fab43326cfb99ebeb470d3b2aee6b02c2b53" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="363ce37a5dbdf8b21b3ae0f6713b1d52da721b89b120be77bddb65ec87ff2b72" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="8d1769937eba20a82435932cced0f5661b03d5bfea724519f988477de95631fc" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="0b18fd2459b73f61a31b219d7043a845a2e301f76fb3a3c27c5fb623db662f22" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="9e3f6c7b5d298a04cb6f3b25c3f57a0583aa3f7d7f32f5749568049a0e502b15" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="794ec709d063193c5e6f2092124d24fb33dde0926cfed87e72b97f1706b77c57" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="d56ba57909a8ef38c33649544703338379395642cf985a43535958c499e0b9e1" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="402826ef877c880b9d3576d8c030c0f1d0e89e482e5264513fdd10fb3480353d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="ed6be187a3aa5dc86c6711652d4fc8478b48c9bf0e96408f2e8bc3bc82d0587c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="1a41547e43e114098ef5506f3e205115aba4918e9f79ee48d116e5c4a3fbe06d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="043b3ba3fb9be829581a69e6fda07b6e1847adc3d81d78e9af51f5752fbf7c0e" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="8ec75c407e251fdbdcda5576fa14c51124881f5ebbe7be1b8afb807b72cc6e86" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="2f51b4f26f56f583dcb20291ee9f2cf45af85aa16d1a402e84a228ebb3da5318" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="3ff4ac3e8d6779a199b58793ff35f9e0f7c5b3b5125a0c35fad2911e428933e7" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="662c215d94cb09737348eebd4f08e45e6aac647b3a545f72dde81fae2da6906b" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="972f3b75c936aa034bc822d3f8e867bb299bc1ddb63c781583d0faf9951920bf" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="1496560b08d24943cdd9294f4d88c4e949321d33d907101a29afa5b489576d4a" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="0f74b4cfb205d5b5cfc36510102c6b2442f3c397795cccafdbf71e092193cb9d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="833ab6dad457b4b9dfb50017c0fe40b4c7b5ef157548fbe28d16ce59a7fda3d6" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="3c0f08abd4370ff5c3741b0d8a9d9221b39f7cbbe82ed447b526c99dab211996" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="4079fbf1a7bbb8c3588c15e1e1906c59c59e6ecf5c6b74daadda9272f43d395f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="b634630c6eaa2e18809abc66f2f5e4f2fe8d8d155ad9006a02478895880759fb" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="36d185626694b928d3deaa59552c51dece7ae2b896de1cb4ee86abe0debb5a5f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="c713451342ab02ad5d0dfb9fe1472dda938e492907997e9c05b1a3775faa89db" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="b266c09720a0aa79b63675ea543518535e1881ff6733b420ca0443f9a0916467" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="9dda68f2fa27febe5ce59fa2ec37b5bd7ca9de82402004f64eec631e821b3a0c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="64ccb183d72b900eeabd92af6dc9c4c49b252d3229a74a13cdb404a0d722a62b" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="6653d7421135420e00079576f6739b07297812f2517a3a3adcc3e6c0e67d607e" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="770835707710b3b9021b576a1e7479c6fb0d3086b241dddc3a964e71e13adf86" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="e4ad754890fbf87061a4e12aa1b92a720e44bcdb8acb1c1bede3f0f5ac1b781d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="8688c53b124e038ba870406cea63c2352d1727d0a5272404b3a19a71dbf27ae6" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="e08b5deff7db5915047aa89687fa84bd61d258a479505f69faa78394ef342248" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="df8396cba8317ea73b7fb418dcf3cf95e120996316bd358ca35a11d88e877436" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="4db4efa5d4b6ee5c17db877e66a53ed2525cd7655c2d2846bb92fb4229a45e2f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="aba89ceed0d438360d24d7a945669012d01ab86d74ca9b89ccf972b157f51461" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="03f7d00f6d381503228e21c95f6dc462f73793b555d1218d6418e601365c3ee1" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="61061e44bae92ea3abfd8167a47b29951885ab4a841166e9647de31d837c1771" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="0348fb4e4ef7772c724bdeabccfab95836234d993ffd52c3a1396241663b816c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="dbfae51b03d53b227b12013cf96e5b94a4d8a8ed6468d406f79a01c994827f99" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="27959ae86061dc974f1ed0a54a850334b095db8cefd1091d1a2d93c8e03b863d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="921a40d9f5d245fdb73978e34ffdf2cc5f648cb4514be53bd733400977e22efe" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="2c064ba4af088bf42a140b14da2812012ca04efd541af6de626c47ee94a9141f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="29d120bcae3fd0f98e85a5436816acba737973b45ea9d7d9d1063f20f416d63c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="0d39e197f9c3ff68717d64da0bdbbee3837802bfee7b28219750241c8fc95aec" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="2ebbd059aa987d2c30bfd09ac48150d085d22f5290e641fdfac4ad667ecbb579" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="8269a5a075559b310d5993042b65236318f10ff84a26469797f17be5d8563ac1" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="3ac7dc5c16e1c26d7a364514a23dcbab0d06d9e0cbe8f6bc30f138112c2c4744" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="e22d80c2768030156d597479ca4080211b20ce72ef410cece04a9e489209c5f1" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="17394598f396b7a241cc48567ea57670dde2d60555693660e297aa1bbb909a52" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="e12d587616e2ab92a17bdd3c2332af64164ee98534398ebd8d202538bde409d6" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="81f1ef475b23ccfe5b549885c5d5acf5c75f2562b216227e7f02002a01266ed6" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="5a9fd46ede0d56bfb7a0ca204bd24bd00c04d390c78057a918e9a3967bef5ad5" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="d2ce1213976188dbe0d8ddd633a73da5cd3950713f69612d51da63d1405fe76d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="e22582b1ee3ab9d078fbaf92c156234aa10043131e480b1b44976d17b6e94984" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="c4e8849b9d1ccf1ad6fbd51f7401e22585286f3731c4024a303447c33fd7f436" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="60d4dbc66f0abadc7722092e52ae4f30a975ccc1192895dd9fa20fb512e45079" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="ca0424d1fa2cc022aeac4c84b0ad0f306a7b2fc286be260afc3f48525856cf42" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="029f0ae484843bf958f466c64e4b1d29b431a808a00281502b5103e5e11b286a" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="8ef379532689bd17d3f8a6ac14fee0e3b882bbb8387a3e707ec6133a0e430357" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="6762da66e42b131516c8cf0443f6aec2ac754f49cf07c93555d9662c9efb28da" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="0d1aab71f7a5eb11b20ee491f2065e14bee5005b0ad3ef88ae6b5832b3600558" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="75702c3a7febb2390cd4ddf664a7d0baa3115649c25d58ab98df4bddb66bcd3d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="3837f1a5a54468a04ca5302ebda2ca3bef79a4d5a71faef16607da70dc97169a" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="5c035aa1d3c4f2c1c369e7858e17226b6a3f6c9cf93d9ba582d1813a78ac90e1" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="ec6c87e896348dc8f093b9fc2350cac35483b5ea7f44230bc814b34c0ec6d354" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="e4ddcdd70c74cae44f07f4bdc4180262d4ab0f46409c70f39a56defbe5d594dc" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="8e7e4c8d838c50f8604662a9cc96e48a371b3a09c364db2338ce2a3451f5fa80" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="7b52ffc7dc50f23a5a0c924e1c05510df1978ac16d52d3269f1839810d28de8d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="123073ea7032621fb5ce9806b3eb10391ea6ff73f412b8b00abc9c0ad0c519a8" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="45dfacc9d401f6fc19bb629f6ed218872e40019ea451cfab3d27c58d6fd475b1" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="df7e7ccc335bb022c1d20d39148a81ff483185adeac1c3d65affd5e425465f69" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="739f817022e54d39fbadae4620c4d3da6ca2d17e5e3bede49ad69aeec14e5f7d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="659d399b98c52fda48170a8c3d670b22509172ed1b86bbb47927ada321f9346c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="45f16f4a42eb53ffbe0cd3147f3db1baab843c06406d464641e2f6ef3430ebff" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="7350bd67dd7116db6b51d3cdfaa0c06f86cd6ae316ecda7fe1efe7766930640c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="7f9cf16a64d8d49ee182543f43a148d7ba848b9c7deb61e808c142fccb22af08" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="c19874bfb4d22ac6a26a23490040aae98f9519ab94d38ed53b2f6c2ad6253c14" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="19b4ff72a39a014198910a579a8a3049b3e8e93e55d551347f75f01a2de7ec1c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="2754db4e7a85da3f50f0c24aaab72dc4dde2bec7d2b8bc0ab3e153b5cd9eb491" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="5a5d2c5f3fcfd2fbdeb54058945df8a08d6bf52d9291a03bedac6683ef4398cc" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="d276eed450b1aa199642716c33526462aa740ada8544029675327ac9afbc0a44" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="5ec023a8cf330fe7cfd6bdbc53615ff0a3a215fb4372ff288a6cf0c284d82821" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="d63f6f9d7024f548c50ad2abd4e6ef884b15cfe1c1b3548aabb5ba0d1bac9825" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="a8478410353f28d80450cf18fd01fd458273a7cbfb441f826eb2c5ec36c568b9" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="13c6f55fc7b43ba9189906358964c682d9ffd962efb11083d54ce3d333215567" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="d3b500212ad8567932dabefc1684341065f84a5f9a23d3e170cb9bf8ce3973f7" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="bd1be46cc49e9157db9c708a8a782030eb269bc0f7af917fe5eb34579c636419" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="11cc56b909769f3ec90f8770545f5f0447115a06ce38e938a7cdcfa6808b2059" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="e3c5a70fea30c004e632cb2fa4094ccdc056f9f7577686a83288df38be668931" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.100.0.181.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
</package>
<package pkgid="ca5ef39ea3c937ddd7d9c1c8cf905d679040bfb4fc70b87998074562c73d89ac" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.101.0.182.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.100.0.181" date="1730808000">- !13008  CVE-2024-49950
- !13050  ext4: fix CVE-2024-47701
- !13045 [sync] PR-12958:  ext4: update orig_path in ext4_find_extent()
- !12681  smb: client: fix UAF in async decryption
- !12990  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !12995  drm/amd/display: Check BIOS images before it is used
- !13020  l2tp: prevent possible tunnel refcount underflow
- !13021  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !12985 [sync] PR-12781:  uprobes: fix kernel info leak via "[uprobes
- !13038  drm/shmem-helper: Remove errant put in error path
- !13037  Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- !13036  iio: health: afe4403: Fix oob read in afe4403_read_raw
- !13035  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- ext4: fix RENAME_WHITEOUT handling for inline directories
- !12902  ext4: fix double brelse() the buffer of the extents path
- !12898  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: update orig_path in ext4_find_extent()
- drm/shmem-helper: Remove errant put in error path
- !12989  CVE-2022-48966
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- !12885  CVE-2024-50016
- !12836  ASoC: ops: Fix bounds check for _sx controls
- !12999  f2fs: get rid of online repaire on corrupted directory
- !12802  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12910  fsnotify: fix CVE-2024-47660
- !12907  io_uring: fix CVE-2024-50060
- !12880  drm/stm: Avoid use-after-free issues with crtc and plane
- !12917  tipc: re-fetch skb cb after tipc_msg_validate
- !12914  CVE-2022-48961
- !12912  ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12945  fix CVE-2024-47723
- !12951  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12955  memcg_write_event_control(): fix a user-triggerable oops
- !12823  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12549  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12872  Fix CVE-2024-47703
- !12894  ext4: avoid use-after-free in ext4_ext_show_leaf()
- f2fs: get rid of online repaire on corrupted directory
- !12936  ASoC: soc-pcm: Add NULL check in BE reparenting
- !12935  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12956  wifi: cfg80211: fix buffer overflow in elem comparison
- drm/amd/display: Check BIOS images before it is used
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- net: mvneta: Fix an out of bounds check
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- !12864  CVE-2022-49020
- !12833  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12876  tipc: guard against string buffer overrun
- !12839  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12921  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12889  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- uprobes: fix kernel info leak via "[uprobes]" vma
- wifi: cfg80211: fix buffer overflow in elem comparison
- memcg_write_event_control(): fix a user-triggerable oops
- !12845  ACPI: sysfs: validate return type of _STR method
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12931  tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12929  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12930  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- ASoC: soc-pcm: Add NULL check in BE reparenting
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12788  slip: make slhc_remember() more robust against malicious packets
- !12789  net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- !12787  net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- !12786  mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- !12740  r8169: add tally counter fields added with RTL8125
- !12744  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12408  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12379  nfsd: return -EINVAL when namelen is 0
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- driver core: add a helper to setup both the of_node and fwnode of a device
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- net/9p: Fix a potential socket leak in p9_socket_open
- !12811  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12819  iio: health: afe4404: Fix oob read in afe4404_[read|write
- !12828  drm/amd/display: Check null pointers before using them
- !12797  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12692 [sync] PR-12354: Backport important bugfix from the kernel-5.10.y
- ASoC: ops: Fix bounds check for _sx controls
- !12796  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12765  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12660  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12763  CVE-2024-50063
- !12487  gtp: fix a potential NULL pointer dereference
- !12761  smack: tcp: ipv4, fix incorrect labeling
- !12779  riscv: Sync efi page table's kernel mappings before switching
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- !12687 [sync] PR-12672:  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- slip: make slhc_remember() more robust against malicious packets
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- riscv: Sync efi page table's kernel mappings before switching
- !12552  cifs: Fix buffer overflow when parsing NFS reparse points
- !12714  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12706  fix CVE-2024-49924
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12731  net: phy: fix null-ptr-deref while probe() failed
- !12722  ppp: fix ppp_async_encode() illegal access
- !12555  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- smack: tcp: ipv4, fix incorrect labeling
- !12734  CVE-2024-50059
- !12404  fix CVE-2024-49954
- !12367  fix CVE-2022-49011
- !12518  fix CVE-2024-47742
- !12664 v2  CVE-2024-49955
- !12684  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12696  mm: memcg: don't periodically flush stats when memcg is disabled
- !12695  crypto: xor - fix template benchmarking
- r8169: add tally counter fields added with RTL8125
- !12702  vhost_vdpa: assign irq bypass producer token correctly
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- net: phy: fix null-ptr-deref while probe() failed
- ppp: fix ppp_async_encode() illegal access
- !12520  ipv6: avoid use-after-free in ip6_fragment()
- !12677  CVE-2024-47673
- !12675  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12643  Bluetooth: Fix crash when replugging CSR fake controllers
- !12500  nbd: fix race between timeout and normal completion
- !12609  blk_iocost: fix more out of bound shifts
- mm: memcg: don't periodically flush stats when memcg is disabled
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- scsi: mpt3sas: Remove scsi_dma_map() error messages
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- Bluetooth: Fix crash when replugging CSR fake controllers
- blk_iocost: fix more out of bound shifts
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ipv6: avoid use-after-free in ip6_fragment()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- nfsd: return -EINVAL when namelen is 0
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.101.0.182" date="1731499200">- !13152  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13153  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13155  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13166  CVE-2024-50133
- !13163  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- RDMA/mad: Improve handling of timed out WRs of mad agent
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13123  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13145  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12967  : ext4: no need to continue when the number of entries is 1
- !12964  ext4: fix timer use-after-free on failed mount
- !12966  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12963  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12961  exfat: fix memory leak in exfat_load_bitmap()
- !12962  ext4: fix access to uninitialised lock in fc replay path
- !12965  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- !13090  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13102  thunderbolt: Mark XDomain as unplugged when router is removed
- !13100  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13104  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13065 [sync] PR-12984: [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13070  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13071  static_call: Handle module init failure correctly in static_call_del_module()
- !13058  net: add more sanity checks to qdisc_pkt_len_init()
- !13059  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13057 [sync] PR-13017:  f2fs: fix to wait dio completion
- !13056 [sync] PR-13015:  drm/amd/display: Check stream before comparing them
- !12946  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- static_call: Handle module init failure correctly in static_call_del_module()
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- f2fs: fix to wait dio completion
- drm/amd/display: Check stream before comparing them
- net: add more sanity checks to qdisc_pkt_len_init()
- ext4: no need to continue when the number of entries is 1
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix timer use-after-free on failed mount
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix access to uninitialised lock in fc replay path
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="e1d74e316f2231aa5003cd9e301c515c7a05279d1a4468af20f48fe53d74add8" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.14.2.90.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.1.0.76" date="1670846400">- coresight: trbe: Enable ACPI/Platform automatic module loading
- arm64/trbe: Add initial MADT/SPE probing
- ACPI 6.5: MADT: add support for trace buffer extension in GICC
- coresight: Return the pointer of @pdata when not "fwnode"
- blk-mq: don't access request_wrapper if request is not allocated from block layer
- blk-mq: fix kabi broken due to request_wrapper
- ide-cd: don't clear rq_flags after blk_get_request
- iommu: Fix error handling in probe_acpi_namespace_devices()
- !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
- !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
- net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
- net: hns3: fix getting supported parameter from driver in hclge_set_wol
- net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
- net: hns3: fix return value check bug of rx copybreak
- net: hns3: fix incorrect hw rss hash type of rx packet</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
</package>
<package pkgid="53d4b29ac7791a16c061d12042c39197deee8015e6fe08f042ecd27bed8dc2fd" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.15.0.91.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.3.0.77" date="1670932800">- !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
- Revert "ipvlan: Modify the value of ipvlan modes"
- net/af_packet: make sure to pull mac header
- KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- arm64: fix a concurrency issue in emulation_proc_handler()
- vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vhost-vdpa: call vhost_vdpa_cleanup during the release
- vhost: allow batching hint without size
- vdpa_sim: set vringh notify callback
- virtio_pci: struct virtio_pci_common_cfg add queue_reset
- virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
- virtio: use virtio_reset_device() when possible
- virtio: document virtio_reset_device
- virtio: wrap config-&gt;reset calls
- virtio_pci: introduce helper to get/set queue reset
- virtio_pci: extract the logic of active vq for modern pci
- vhost-vdpa: uAPI to suspend the device
- vhost-vdpa: introduce SUSPEND backend feature bit
- vdpa: Add suspend operation
- vhost-vdpa: Call ida_simple_remove() when failed
- vDPA: fix 'cast to restricted le16' warnings in vdpa.c
- vDPA: !FEATURES_OK should not block querying device config space
- vdpa: make get_vq_group and set_group_asid optional
- vhost-vdpa: return -EFAULT on copy_to_user() failure
- vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
- vhost-vdpa: support ASID based IOTLB API
- vhost-vdpa: introduce uAPI to set group ASID
- vhost-vdpa: uAPI to get virtqueue group id
- vhost-vdpa: introduce uAPI to get the number of address spaces
- vhost-vdpa: introduce uAPI to get the number of virtqueue groups
- vhost-vdpa: introduce asid based IOTLB
- vhost: support ASID in IOTLB API
- vhost_iotlb: split out IOTLB initialization
- vdpa: introduce config operations for associating ASID to a virtqueue group
- vdpa: multiple address spaces support
- vdpa: introduce virtqueue groups
- vhost-vdpa: switch to use vhost-vdpa specific IOTLB
- vhost-vdpa: passing iotlb to IOMMU mapping helpers
- virtio-vdpa: don't set callback if virtio doesn't need it
- vhost: move the backend feature bits to vhost_types.h
- net/vdpa: Use readers/writers semaphore instead of cf_mutex
- net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
- vdpa: Add support for querying vendor statistics
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- vhost: handle error while adding split ranges to iotlb
- vdpa: change the type of nvqs to u32
- vhost: fix hung thread due to erroneous iotlb entries
- vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
- vdpa: Protect vdpa reset with cf_mutex
- vdpa: Avoid taking cf_mutex lock on get status
- vdpa: Use BIT_ULL for bit operations
- vdpa: Support reporting max device capabilities
- vdpa: Add support for returning device configuration information
- vdpa: Allow to configure max data virtqueues
- vdpa: Read device configuration only if FEATURES_OK
- vdpa: Sync calls set/get config/status with cf_mutex
- vdpa: Provide interface to read driver features
- vdpa: Mark vdpa_config_ops.get_vq_notification as optional
- vdpa: Avoid duplicate call to vp_vdpa get_status
- docs: document sysfs ABI for vDPA bus
- vhost-vdpa: clean irqs before reseting vdpa device
- vdpa: Enable user to set mac and mtu of vdpa device
- vdpa: Use kernel coding style for structure comments
- vdpa: Introduce query of device config layout
- vdpa: Introduce and use vdpa device get, set config helpers
- vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
- virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
- vdpa: min vq num of vdpa device cannot be greater than max vq num
- vdpa: add new callback get_vq_num_min in vdpa_config_ops
- vhost_vdpa: unset vq irq before freeing irq
- vdpa: potential uninitialized return in vhost_vdpa_va_map()
- vhost-iotlb: Add an opaque pointer for vhost IOTLB
- vdpa: Support transferring virtual addressing during DMA mapping
- vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
- vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
- vhost-vdpa: Handle the failure of vdpa_reset()
- vdpa: Fix some coding style issues
- vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
- vdpa: Add documentation for vdpa_alloc_device() macro
- virtio/vdpa: clear the virtqueue state during probe
- vp_vdpa: correct the return value when fail to map notification
- virito_pci libray: hide vp_modern_map_capability()
- vhost/vdpa: Remove the restriction that only supports virtio-net devices
- virtio_pci_modern: hide vp_modern_get_queue_notify_off()
- vdpa: Follow kdoc comment style
- vdpa: Follow kdoc comment style
- virtio_vdpa: don't warn when fail to disable vq
- vdpa: Use simpler version of ida allocation
- vhost_vdpa: switch to vmemdup_user()</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
</package>
<package pkgid="a09e3aaf653cbdca3967b38b09cddbaf0b28d99f5f515c1f0738bdd4e52a90e3" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.16.0.92.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.4.0.78" date="1671105600">- RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
- RDMA/hns: Fix AH attr queried by query_qp
- RDMA/hns: Kernel notify usr space to stop ring db</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
</package>
<package pkgid="6c05addb6989e30209d480d61457fff424bed448211ea473590336572c468523" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.17.0.93.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 5.10.0-136.4.0.79" date="1671364800">- Process PGP certs before kernel building</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.8.0.80" date="1671451200">- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix build errors in some archs
- cpuidle: add cpuidle-haltpoll driver module parameter
- clk: imx: Add check for kcalloc
- x86/cpu/hygon: Set __max_die_per_package on Hygon
- mm/dynamic_hugetlb: fix clear PagePool without lock protection
- mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
- mm/swapfile: use new way to fix broken kabi in swap_info_struct
- block: always align request_wrapper to cacheline
- block: fix crash on cmpxchg for request_wrapper
- efi/libstub: Fix build error in efi-stub.c for riscv
- mm: init: Fix build waring for ascend enable features
- mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
- ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
- xen/netback: fix build warning
- xen/netback: Ensure protocol headers don't fall in the non-linear area
- block: only use cmpxchg64 in 64bit platform
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- proc: avoid integer type confusion in get_proc_long
- sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
</package>
<package pkgid="e7c3d6a8c82bc0974234ff77a291b1aec28f010265541b2a4e0a17205d5ac532" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.19.0.95.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.10.0.82" date="1671796800">- scsi: iscsi: remove .unbind_conn from iscsi_transport
- Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
</package>
<package pkgid="65b5eb48c627df1ff9ddbe76b04091c6f8cb88635c862d1c95382d3a33d4e32b" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.20.0.96.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.0.86" date="1672056000">- timekeeping: Adding a padding before timekeeper in tk_core</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
</package>
<package pkgid="6b763de7bc937854937c3216e9efdb58a5dca93eaaf1e49ee8139cde8594ddba" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.21.0.97.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.12.2.88" date="1672228800">- !333 Fix PASID use-after-free issue
- mm: Fix PASID use-after-free issue</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
</package>
<package pkgid="b415deb163ff2e9ed604e7946a60d37d58dbb76c6385baace10760ed99011d30" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.22.0.98.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.13.2.89" date="1672833600">- media: mceusb: Use new usb_control_msg_*() routines
- perf: hisi: Fix read sccl_id and ccl_id error in TSV200
- mm: add cond_resched() in swapin_walk_pmd_entry()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
- livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
- dm thin: Use last transaction's pmd-&gt;root when commit failed
- zram: avoid race between zram_remove and disksize_store
- zram: don't fail to remove zram during unloading module
- blk-mq: fix kabi broken in struct bio
- blk-mq: fix kabi broken in struct request
- block, bfq: fix possible uaf for 'bfqq-&gt;bic'
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- blk-mq: set default elevator as deadline in case of hctx shared tagset
- ext2: replace bh_submit_read() helper with bh_read()
- ufs: replace ll_rw_block()
- udf: replace ll_rw_block()
- reiserfs: replace ll_rw_block()
- ocfs2: replace ll_rw_block()
- ntfs3: replace ll_rw_block()
- jbd2: replace ll_rw_block()
- isofs: replace ll_rw_block()
- gfs2: replace ll_rw_block()
- fs/buffer: replace ll_rw_block()
- fs/buffer: add some new buffer read helpers
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: dvb-core: Fix UAF due to refcount races at releasing
- wifi: wilc1000: validate pairwise and authentication suite offsets
- wifi: wilc1000: validate number of channels
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
- drm/amdkfd: Check for null pointer after calling kmemdup</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.14.2.90" date="1673006400">- !341 Backport CVEs and fs bugfixes
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
- bfq: fix null-ptr-deref in bfq_pd_offline
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- ksmbd: fix heap-based overflow in set_ntacl_dacl()
- ksmbd: prevent out of bound read for SMB2_WRITE
- ksmbd: validate length in smb2_write()
- xfs: fix super block buf log item UAF during force shutdown
- xfs: wait iclog complete before tearing down AIL
- xfs: get rid of assert from xfs_btree_islastblock</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
</package>
<package pkgid="da9bc73a30fe30b108648d71839ee6938b92aa049fb3c063075f0705adbe9c82" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.24.0.100.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.15.0.91" date="1673438400">- !347 Backport CVEs and fs bugfixes
- io_uring: kill goto error handling in io_sqpoll_wait_sq()
- ext4: fix bad checksum after online resize
- xfs: fix use-after-free in xattr node block inactivation
- USB: core: Fix RST error in hub.c
- USB: core: Prevent nested device-reset calls</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.16.0.92" date="1674043200">- !358 Backport CVEs, bugfixes and other
- binder: fix UAF of alloc-&gt;vma in race with munmap()
- io_uring: add missing item types for splice request
- xfs: fix overfilling of reserve pool
- xfs: always succeed at setting the reserve pool size
- xfs: remove infinite loop when reserving free block pool
- xfs: use current-&gt;journal_info for detecting transaction recursion
- fix kabi broken due to may_pollfree
- io_uring: disable polling pollfree files
- ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
- driver: char: delete svm.c
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- tracing/osnoise: Do not unregister events twice
- tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
- !351 AMD: Fix cpu capabilities incorrect detection bug.
- x86/cpufeatures: Fix cpu capabilities incorrect detection.</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
</package>
<package pkgid="1348de324fec908ee9bc616356e68eca6544f27d0004a74913a3fa09de20e8d0" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.26.0.102.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.17.0.93" date="1675252800">- !372 Backport 5.10.141 LTS
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- net/af_packet: check len when min_header_len equals to 0
- lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: Fix pixel clock programming
- drm/amd/pm: add missing -&gt;fini_microcode interface for Sienna Cichlid
- s390/hypfs: avoid error message under KVM
- neigh: fix possible DoS due to net iface start/stop loop
- drm/amd/display: clear optc underflow before turn off odm clock
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: Avoid MPC infinite loop
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- net: fix refcount bug in sk_psock_get (2)
- HID: hidraw: fix memory leak in hidraw_release()
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
- kbuild: Fix include path in scripts/Makefile.modpost
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- x86/nospec: Fix i386 RSB stuffing
- x86/nospec: Unwreck the RSB stuffing
- !368 Backport CVEs and bugfixes
- mm/memory: return vm_fault_t result from migrate_to_ram() callback
- net: sched: disallow noqueue for qdisc classes
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- xfs: Fix deadlock on xfs_inodegc_worker
- net: sched: cbq: dont intepret cls results when asked to drop
- net: sched: atm: dont intepret cls results when asked to drop
- scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
- of/fdt: Don't calculate initrd size from DT if start &gt; end
- lib/cmdline: avoid page fault in next_arg
- rndis_wlan: Prevent buffer overflow in rndis_query_oid
- mm/vmpressure: fix data-race with memcg-&gt;socket_pressure
- !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
- kasan: add kasan support for memcpy_mcs()
- arm64: fix return value type of memcpy_mcs()
- !363 AMD: Support svm guest when host CR4.LA57 is set.
- KVM: x86: Allow CPU to force vendor-specific TDP level
- !338 Fix virtio-gpu free issues
- drm/virtio: free virtqueues on probe failure
- drm/virtio: Fixes a potential NULL pointer dereference on probe failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
</package>
<package pkgid="cf4abab9f95225ff62b4cd683fd7e15e057bf0516c16cc880fbd349b4661ae06" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.27.0.103.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.18.0.94" date="1675857600">- !385 Backport CVEs and bugfixes
- !384 Backport 5.10.142 LTS
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
- net: sched: fix race condition in qdisc_graft()
- macvlan: enforce a consistent minimal mtu
- net: switch to storing KCOV handle directly in sk_buff
- kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
- tcp/udp: Make early_demux back namespacified.
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix null-ptr-deref in ext4_write_info
- block: don't allow a disk link holder to itself
- hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
- scsi: fix iscsi rescan fails to create block
- mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
- mm: memcontrol: fix potential oom_lock recursion deadlock
- irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
- xfs: fix potential log item leak
- USB: serial: ch341: fix disabled rx timer on older devices
- USB: serial: ch341: fix lost character on LCR updates
- usb: dwc3: disable USB core PHY management
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: fix PHY disable sequence
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- btrfs: harden identification of a stale device
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- ALSA: seq: Fix data-race at module auto-loading
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- net: mac802154: Fix a condition in the receive path
- ip: fix triggering of 'icmp redirect'
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- driver core: Don't probe devices after bus_type.match() probe deferral
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- s390: fix nospec table alignments
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: cp210x: add Decagon UCA device id
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- thunderbolt: Use the actual buffer in tb_async_error()
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkback: Advertise feature-persistent as user requested
- mm: pagewalk: Fix race between unmap and page walker
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- hwmon: (gpio-fan) Fix array out of bounds access
- clk: bcm: rpi: Add missing newline
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- Input: rk805-pwrkey - fix module autoloading
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- drm/i915/reg: Fix spelling mistake "Unsupport" -&gt; "Unsupported"
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- misc: fastrpc: fix memory corruption on open
- misc: fastrpc: fix memory corruption on probe
- iio: adc: mcp3911: use correct formula for AD conversion
- iio: ad7292: Prevent regulator double disable
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
- vt: Clear selection before changing the font
- powerpc: align syscall table for ppc32
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- net/smc: Remove redundant refcount increase
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- tcp: annotate data-race around challenge_timestamp
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- kcm: fix strp_init() order and cleanup
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- Revert "xhci: turn off port power in shutdown"
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ieee802154/adf7242: defer destroy_workqueue call
- iio: adc: mcp3911: make use of the sign bit
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- drm/msm/dsi: Fix number of regulators for SDM660
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: fix the inconsistent indenting</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
</package>
<package pkgid="14fc88f3c8794313bddef1fa1c274d8e6d29fb76aafb0e536eafdf1b177e01c0" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.28.0.104.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.19.0.95" date="1676548800">- !403 Backport 5.10.145 - 5.10.149 LTS
- wifi: mac80211: don't parse mbssid in assoc response
- mac80211: mlme: find auth challenge directly
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- misc: pci_endpoint_test: Aggregate params checking for xfer
- Input: xpad - fix wireless 360 controller breaking after suspend
- Input: xpad - add supported devices as contributed on github
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- wifi: cfg80211: ensure length byte is present before access
- wifi: cfg80211/mac80211: reject bad MBSSID elements
- random: use expired timer rather than wq for mixing fast pool
- random: avoid reading two cache lines on irq randomness
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- efi: Correct Macmini DMI match in uefi cert quirk
- ALSA: hda: Fix position reporting on Poulsbo
- random: clamp credited irq bits to maximum mixed
- random: restore O_NONBLOCK support
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- mmc: core: Replace with already defined values for readability
- drm/amd/display: skip audio setup when audio stream is enabled
- drm/amd/display: update gamut remap if plane has changed
- net: atlantic: fix potential memory leak in aq_ndev_close()
- arch: um: Mark the stack non-executable to fix a binutils warning
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- firmware: arm_scmi: Add SCMI PM driver remove routine
- compiler_attributes.h: move __compiletime_{error|warning}
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- mm: gup: fix the fast GUP race against THP collapse
- xsk: Inherit need_wakeup flag for shared sockets
- perf tools: Fixup get_current_dir_name() compilation
- docs: update mediator information in CoC docs
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- ceph: don't truncate file in atomic_open
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ALSA: hda/hdmi: fix warning about PCM count when used with SOF
- x86/alternative: Fix race in try_get_desc()
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- clk: iproc: Do not rely on node name for correct PLL setup
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- selftests: Fix the if conditions of in test_extra_filter()
- net: stmmac: power up/down serdes in stmmac_open/release
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- nvme: add new line after variable declatation
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- usbnet: Fix memory leak in usbnet_disconnect()
- Input: melfas_mip4 - fix return value check in mip4_probe()
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
- ASoC: tas2770: Reinit regcache on reset
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi: sram: Actually claim SRAM regions
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- swiotlb: max mapping size takes min align mask into account
- media: rkvdec: Disable H.264 error detection
- media: dvb_vb2: fix possible out of bound access
- mm: fix madivse_pageout mishandling on non-LRU page
- mm/migrate_device.c: flush TLB while holding PTL
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/page_alloc: fix race condition between build_all_zonelists and page allocation
- mmc: hsq: Fix data stomping during mmc recovery
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- net: mt7531: only do PLL once after the reset
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- ARM: dts: integrator: Tag PCI host with device_type
- clk: ingenic-tcu: Properly enable registers before accessing timers
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- usb: typec: ucsi: Remove incorrect warning
- uas: ignore UAS for Thinkplus chips
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: add no-uas quirk for Hiksemi usb_disk
- btrfs: fix hang during unmount when stopping a space reclaim worker
- ALSA: hda: Fix Nvidia dp infoframe
- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
- ALSA: hda/tegra: Reset hardware
- ALSA: hda/tegra: Use clk_bulk helpers
- thunderbolt: Add support for Intel Maple Ridge single port controller
- thunderbolt: Add support for Intel Maple Ridge
- ext4: make directory inode spreading reflect flexbg size
- ext4: limit the number of retries after discarding preallocations blocks
- devdax: Fix soft-reservation memory description
- i2c: mlxbf: Fix frequency calculation
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: incorrect base address passed during io write
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/amd/display: Limit user regamma to a valid value
- drm/amdgpu: use dirty framebuffer helper
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
- cifs: always initialize struct msghdr smb_msg completely
- cifs: use discard iterator to discard unneeded network data more efficiently
- drm/amdgpu: Fix check for RAS support
- vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
- usb: xhci-mtk: fix issue of out-of-bounds array access
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: Create uart_xmit_advance()
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- selftests: forwarding: add shebang for sch_red.sh
- net: sched: fix possible refcount leak in tc_new_tfilter()
- net: sunhme: Fix packet reception for len &lt; RX_COPY_THRESHOLD
- net/smc: Stop the CLC flow if no link to map buffers on
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf jit: Include program header in ELF files
- can: gs_usb: gs_can_open(): fix race dev-&gt;can.state condition
- netfilter: ebtables: fix memory leak when blob is malformed
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
- net/sched: taprio: avoid disabling offload when it was never enabled
- net: socket: remove register_gifconf
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- wireguard: ratelimiter: disable timings test by default
- net: ipa: properly limit modem routing table use
- net: ipa: kill IPA_TABLE_ENTRY_SIZE
- net: ipa: DMA addresses are nicely aligned
- net: ipa: avoid 64-bit modulus
- net: ipa: fix table alignment requirement
- net: ipa: fix assumptions about DMA address size
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- drm/hisilicon: Add depends on MMU
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- sfc: fix null pointer dereference in efx_hard_start_xmit
- sfc: fix TX channel offset when using legacy interrupts
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- i40e: Fix VF set max MTU size
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- iavf: Fix bad page state
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- net: team: Unsync device addresses on ndo_stop
- net: bonding: Unsync device addresses on ndo_stop
- net: bonding: Share lacpdu_mcast_addr definition
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
- net: phy: aquantia: wait for the suspend/resume operations to finish
- net: core: fix flow symmetric hash
- net: let flow have same hash in two directions
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- xfs: validate inode fork size against fork format
- xfs: reorder iunlink remove operation in xfs_ifree
- interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
- mm/slub: fix to return errno if kmalloc() fails
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- riscv: fix a nasty sigreturn bug...
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- wifi: mt76: fix reading current per-tid starting sequence number for aggregation
- efi: libstub: check Shim mode using MokSBStateRT
- efi: x86: Wipe setup_data on pure EFI boot
- media: flexcop-usb: fix endpoint type check
- iommu/vt-d: Check correct capability for sagaw determination
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/tegra: set depop delay for tegra
- USB: serial: option: add Quectel RM520N
- USB: serial: option: add Quectel BG95 0x0203 composition
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- vfio/type1: Unpin zero pages
- vfio/type1: Prepare for batched pinning with struct vfio_batch
- vfio/type1: Change success value of vaddr_get_pfn()
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: add quirks for Lenovo OneLink+ Dock
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- serial: atmel: remove redundant assignment in rs485_config
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
- drm/amdgpu: make sure to init common IP before gmc
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: indirect register access for nv12 sriov
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- net: usb: qmi_wwan: add Quectel RM520N
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- wifi: mac80211_hwsim: check length for virtio packets
- rxrpc: Fix calc of resend age
- rxrpc: Fix local destruction being repeated
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
- ASoC: nau8824: Fix semaphore unbalance at error paths
- Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
- tools/include/uapi: Fix &lt;asm/errno.h&gt; for parisc and xtensa
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: revalidate mapping when doing direct writes
- of/device: Fix up of_dma_configure_id() stub
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- drm/meson: Correct OSD1 global alpha value
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- pinctrl: sunxi: Fix name for A100 R_PIO
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
- platform/x86/intel: hid: add quirk to support Surface Go 3
- usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- powerpc/pseries/mobility: refactor node lookup during DT update
- dmaengine: bestcomm: fix system boot lockups
- parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
- parisc: Optimize per-pagetable spinlocks
- serial: 8250: Fix reporting real baudrate value in c_ospeed field
- KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
- !399 Backport fs, block and net bugfixes
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- block, bfq: switch 'bfqg-&gt;ref' to use atomic refcount apis
- cifs: sanitize multiple delimiters in prepath
- bpf: Fix sockmap calling sleepable function in teardown path
- bpf, sockmap: Fix sk-&gt;sk_forward_alloc warn_on in sk_stream_kill_queues
- !394 Backport 5.10.143 - 5.10.144 LTS
- Input: goodix - add compatible string for GT1158
- soc: fsl: select FSL_GUTS driver for DPIO
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- usb: storage: Add ASUS &lt;0x0b05:0x1932&gt; to IGNORE_UAS
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- Input: iforce - add support for Boeder Force Feedback Wheel
- ieee802154: cc2520: add rc code in cc2520_tx()
- gpio: mockup: remove gpio debugfs when remove device
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- drm/msm/rd: Fix FIFO-full deadlock
- Input: goodix - add support for GT1158
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: imx: align SPI NOR node name with dtschema
- hwmon: (mr75203) enable polling for all VM channels
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) update pvt-&gt;v_num and vm_num to the actual number of used sensors
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- iommu/amd: use full 64-bit value in build_completion_wait()
- swiotlb: avoid potential left shift overflow
- MIPS: loongson32: ls1c: Fix hang during startup
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvme-tcp: fix regression that causes sporadic requests to time out
- nvme-tcp: fix UAF when detecting digest errors
- RDMA/mlx5: Set local port to one when accessing counters
- IB/core: Fix a nested dead lock as part of ODP flow
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/siw: Pass a pointer to virt_to_page()
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- i40e: Fix kernel crash during module removal
- ice: use bitmap_free instead of devm_kfree
- tipc: fix shift wrapping bug in map_get()
- afs: Use the operation issue time instead of the reply time for callbacks
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- ALSA: usb-audio: Register card again for iface over delayed_register option
- ALSA: usb-audio: Inform the delayed registration more properly
- netfilter: nf_tables: clean up hook list when offload flags check fails
- netfilter: br_netfilter: Drop dst references before setting.
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/cma: Fix arguments order in net device validation
- tee: fix compiler warning in tee_shm_register()
- regulator: core: Clean up on enable failure
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- smb3: missing inode locks in punch hole
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
- scsi: lpfc: Add missing destroy_workqueue() in error path
- scsi: mpt3sas: Fix use-after-free warning
- drm/i915: Implement WaEdpLinkRateDataReload
- nvmet: fix a use-after-free
- debugfs: add debugfs_lookup_and_remove()
- kprobes: Prohibit probes in gate area
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- net/core/skbuff: Check the return value of skb_copy_bits()
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- drm/radeon: add a force flush to delay work when radeon
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
- drm/gem: Fix GEM handle release errors
- scsi: megaraid_sas: Fix double kfree()
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
- efi: libstub: Disable struct randomization
- tty: n_gsm: avoid call of sleeping functions from atomic context
- tty: n_gsm: initialize more members at gsm_alloc_mux()
- xen-blkfront: Cache feature_persistent value before advertisement
- NFSD: Fix verifier returned in stable WRITEs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
</package>
<package pkgid="9d7357489f0fd546083d7b41d2de32b14c28b5bdc715946bcd2584b3b2b01700" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.29.0.105.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.20.0.96" date="1677153600">- !409 Backport CVEs and bugfixes
- x86/kasan: Populate shadow for shared chunk of the CPU entry area
- x86/kasan: Add helpers to align shadow addresses up and down
- x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- Huawei BMA: Fix iBMA driver bug
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
- mm,hugetlb: take hugetlb_lock before decrementing h-&gt;resv_huge_pages
- vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
- vfio/iommu_type1: replace kfree with kvfree
- ppp: associate skb with a device at tx
- arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
- bpf, sockmap: fix race in sock_map_free()
- bpf: make sure skb-&gt;len != 0 when redirecting to a tunneling device
- raw: fix KABI for backporting raw RCU conversion patches
- ipv6: Fix crash when IPv6 is administratively disabled
- raw: remove unused variables from raw6_icmp_error()
- raw: fix a typo in raw_icmp_error()
- raw: complete rcu conversion
- raw: Use helpers for the hlist_nulls variant.
- raw: Fix mixed declarations error in raw_icmp_error().
- raw: convert raw sockets to RCU
- raw: use more conventional iterators
- cifs: Fix use-after-free in rdata-&gt;read_into_pages()
- net: bridge: mcast: add and enforce query interval minimum
- net: bridge: mcast: add and enforce startup query interval minimum
- media: vivid: fix compose size exceed boundary
- !346 anolis: bond: broadcast ARP or ND messages to all slaves
- !404 kvm: arm64: fix some pvsched bugs
- kvm: arm64: fix some pvsched bugs
- anolis: bond: broadcast ARP or ND messages to all slaves</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
</package>
<package pkgid="22de296eb68ca33c278b7b47c925c4a651b3b9126d45b6fcc0d3592076d3d834" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.30.0.106.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.21.0.97" date="1677672000">- !417 Backport CVEs and bugfixes
- net: mpls: fix stale pointer if allocation fails during device rename
- x86/bugs: Flush IBP in ib_prctl_set()
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- binder: Address corner cases in deferred copy and fixup
- binder: fix pointer cast warning
- binder: defer copies of pre-patched txn data
- binder: read pre-translated fds from sender buffer
- binder: avoid potential data leakage when copying txn
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- net/sched: sch_taprio: do not schedule in taprio_reset()
- net/sched: sch_taprio: fix possible use-after-free
- nbd: fix assignment error for first_minor in nbd_dev_add
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix overflow in safe_delay_store
- md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
- arm64: topology: fix possible overflow in amu_fie_setup()
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
- io_uring: fix soft lockup in io_submit_sqes()
- fix kabi broken due to import of 5.15-stable io_uring
- io_uring: import 5.15-stable io_uring
- task_work: add helper for more targeted task_work canceling
- coredump: Limit what can interrupt coredumps
- kernel: provide create_io_thread() helper
- fs: provide locked helper variant of close_fd_get_file()
- kernel: remove checking for TIF_NOTIFY_SIGNAL
- entry: Add support for TIF_NOTIFY_SIGNAL
- signal: Add task_sigpending() helper
- arm: add support for TIF_NOTIFY_SIGNAL
- arm64: add support for TIF_NOTIFY_SIGNAL
- riscv: add support for TIF_NOTIFY_SIGNAL
- powerpc: add support for TIF_NOTIFY_SIGNAL
- x86: Wire up TIF_NOTIFY_SIGNAL
- iov_iter: add helper to save iov_iter state
- perf beauty: Update copy of linux/socket.h with the kernel sources
- perf trace beauty: Update copy of linux/socket.h with the kernel sources
- io_uring: correct pinned_vm accounting
- file: Rename __close_fd_get_file close_fd_get_file
- io_uring: don't hold uring_lock when calling io_run_task_work*
- io_uring: don't take uring_lock during iowq cancel
- fs: make do_renameat2() take struct filename
- net: add accept helper not installing fd
- net: provide __sys_shutdown_sock() that takes a socket
- fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
- Make sure nd-&gt;path.mnt and nd-&gt;path.dentry are always valid pointers
- fix handling of nd-&gt;depth on LOOKUP_CACHED failures in try_to_unlazy*
- fs: add support for LOOKUP_CACHED
- Revert "io_uring: fix soft lockup when call __io_remove_buffers"
- Revert "io_uring: deduplicate failing task_work_add"
- Revert "io_uring: don't take uring_lock during iowq cancel"
- Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
- Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
- Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
- Revert "[Huawei] io_uring:drop identity before creating a private one"</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
</package>
<package pkgid="858414d1416acff5c0659dfbfaacd7fa20e1dba1e64c6079422d759cecd40c03" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.31.0.107.oe2203sp1"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-136.22.0.98" date="1678276800">- !455 Backport CVEs and bugfixes
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
- HID: check empty report_list in bigben_probe()
- HID: check empty report_list in hid_validate_values()
- neigh: make sure used and confirmed times are valid
- Documentation/hw-vuln: Fix rST warning
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- radi10: fix leak of 'r10bio-&gt;remaining' for recovery
- md: fix soft lockup in status_resync
- md: don't update recovery_cp when curr_resync is ACTIVE
- md: Ensure resync is reported after it starts
- md: Use enum for overloaded magic numbers used by mddev-&gt;curr_resync
- raid10: fix leak of io accounting
- tcp: Fix listen() regression in 5.15.88.
- net/ulp: Remove redundant -&gt;clone() test in inet_clone_ulp().
- net/ulp: use consistent error code when blocking ULP
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- net/tls: tls_is_tx_ready() checked list_entry
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- splice: don't generate zero-len segement bvecs
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- tap: tap_open(): correctly initialize socket uid
- tun: tun_chr_open(): correctly initialize socket uid
- net: add sock_init_data_uid()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- blk-mq: use quiesced elevator switch when reinitializing queues
- ovl: fix use inode directly in rcu-walk mode</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
</package>
<package pkgid="3e754ff1fd9badafde17e5086771dbec521b3265e9f7ec9beee6a334a41f7056" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.32.0.108.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.23.0.99" date="1678968000">- !484 Backport CVEs and bugfixes
- scsi: cancel the inflight async device probe when remove scsi_target
- ring-buffer: Fix race between reset page and reading page
- raid1, raid10: switch to precise io accounting
- block: add precise io accouting apis
- md/raid10: fix memleak for 'conf-&gt;bio_split'
- scsi: fix use-after-free problem in scsi_remove_target
- sctp: fail if no bound addresses can be used for a given scope
- ext4: fix WARNING in mb_find_extent
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi: Move pool freeing
- xfs: aborting inodes on shutdown may need buffer lock
- ext4: fix incorrect options show of original mount_opt and extend mount_opt2
- !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
- openeuler: pci: workaround multiple functions can be assigned to only one VM
- !452 intel: backport isst issue fix and other update to align with upstream 6.0
- !457 Backport CVEs and bugfixes
- !464 Revert "scsi: fix iscsi rescan fails to create block"
- Revert "scsi: fix iscsi rescan fails to create block"
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
- platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
- platform/x86: ISST: use semi-colons instead of commas
- platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
- platform/x86: ISST: Change PCI device macros
- platform/x86: ISST: Allow configurable offset range
- platform/x86: ISST: Check for unaligned mmio address
- platform/x86: ISST: Fix optimization with use of numa
- platform/x86: ISST: Use numa node id for cpu pci dev mapping
- platform/x86: ISST: Optimize CPU to PCI device mapping</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
</package>
<package pkgid="aca58ea81e731188671bf076f13455c0d737fd792df8c29e1f0cf29ee80d4243" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.33.0.109.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.24.0.100" date="1679486400">- !513 Backport CVEs and bugfixes
- livepatch/core: Fix hungtask against cpu hotplug on x86
- seccomp: Move copy_seccomp() to no failure path.
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
- mm: optimize do_wp_page() for exclusive pages in the swapcache
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: set con sock in tipc_conn_alloc
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- mm/vmalloc: huge vmalloc backing pages should be split rather than compound
- HID: asus: use spinlock to safely schedule workers
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: Remove check for same LED brightness on set
- jbd2: fix data missing when reusing bh which is ready to be checkpointed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
</package>
<package pkgid="31b2651d281019f60bb8d800571e78914a25c128085dda3ef3c1a694d496b9d9" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.34.0.110.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.25.0.101" date="1680091200">- !530 Backport CVEs and bugfixes
- block: fix use-after-free of q-&gt;q_usage_counter
- block: move q_usage_counter release into blk_queue_release
- Revert "block: fix null-deref in percpu_ref_put"
- md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
- xfs, iomap: limit individual ioend chain lengths in writeback
- net/sched: tcindex: search key must be 16 bits
- net/sched: tcindex: update imperfect hash filters respecting rcu
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- fs/ntfs3: Validate resident attribute name
- Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
- mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
- coredump: fix kabi broken in struct coredump_params
- coredump: Use the vma snapshot in fill_files_note
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump: Snapshot the vmas in do_coredump
- mm/swapfile: add cond_resched() in get_swap_pages()
- mm: slince possible data races about pgdat-&gt;kswapd
- mm: fix null-ptr-deref in kswapd_is_running()
- fs/ntfs3: Validate MFT flags before replaying logs
- fs/ntfs3: Validate attribute name offset
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- bpf: Avoid races in __bpf_prog_run() for 32bit arches
- ext4: make sure fs error flag setted before clear journal error
- ext4: commit super block if fs record error when journal record without error
- ima: Fix memory leakage in ima_store_template
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
- arm64: errata: Remove AES hwcap for COMPAT tasks
- ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
- kernel: Initialize cpumask before parsing
- softirq: Don't try waking ksoftirqd before it has been spawned
- bpf: Prevent decl_tag from being referenced in func_proto arg
- bpf: Skip task with pid=1 in send_signal_common()
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- !461 Backport CVEs and bugfixes
- !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
- uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
- malidp: Fix NULL vs IS_ERR() checking</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
</package>
<package pkgid="d14a890e817e4dab6860d560599f11dc5a611b9e3ecdf4efa9a80584c0c60057" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.35.0.111.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.26.0.102" date="1680350400">- !542 fix CVE-2023-0266
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
</package>
<package pkgid="3a69dbb227fe38bd4a840d69990cff0e861ba9d255adbc3893ecb09634f3757c" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.36.0.112.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.27.0.103" date="1680609600">- !562 Backport CVEs and bugfixes
- net: sched: Use struct_size() helper in kvmalloc()
- net_sched: Use struct_size() and flex_array_size() helpers
- ext4: dio take shared inode lock when overwriting preallocated blocks
- ext4: fix race between writepages and remount
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace
- nvme: use nvme_cid to generate command_id in trace event
- xfs: don't report reserved bnobt space as available
- xfs: don't include bnobt blocks when reserving free block pool
- xfs: set aside allocation btree blocks from block reservation
- xfs: introduce in-core global counter of allocbt blocks
- act_mirred: use the backlog for nested calls to mirred ingress
- net/sched: act_mirred: better wording on protection against excessive stack growth
- net/sched: act_mirred: refactor the handle of xmit
- scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
- !557 net: hns3: modify reset delay time to avoid configuration timeout
- net: hns3: modify reset delay time to avoid configuration timeout</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
</package>
<package pkgid="a45f40f85b809988a60c9485e311a1a6e71f1c9809f4f0ed3c209c525dc458e9" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.37.0.113.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.28.0.104" date="1681300800">- !573 Backport CVEs and bugfixes
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- ubi: ensure that VID header offset + VID header size &lt;= alloc, size
- ftrace: Fix issue that 'direct-&gt;addr' not restored in modify_ftrace_direct()
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
- ring-buffer: Fix race while reader and writer are on the same page
- loop: Add parm check in loop_control_ioctl
- ext4: Fix i_disksize exceeding i_size problem in paritally written case
- ext4: ext4_put_super: Remove redundant checking for 'sbi-&gt;s_journal_bdev'
- ext4: Fix reusing stale buffer heads from last failed mounting
- btrfs: fix race between quota disable and quota assign ioctls
- dm crypt: add cond_resched() to dmcrypt_write()
- driver core: Fix lockdep warning on wfs_lock
- driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
- xfs: don't leak memory when attr fork loading fails
- xfs: delete unnecessary NULL checks
- xfs: replace inode fork size macros with functions
- xfs: replace XFS_IFORK_Q with a proper predicate function
- xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
- xfs: make inode attribute forks a permanent part of struct xfs_inode
- xfs: convert XFS_IFORK_PTR to a static inline helper
- xfs: don't reuse busy extents on extent trim
- fs/xfs: convert comma to semicolon
- xfs: xfs_ail_push_all_sync() stalls when racing with updates
- xfs: check buffer pin state after locking in delwri_submit
- xfs: log worker needs to start before intent/unlink recovery</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
</package>
<package pkgid="b938d75e52aedecfd379e6a4764a06ac862503a2dd4401e6a7f1a5facbe7e6f5" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.38.0.114.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.29.0.105" date="1681905600">- !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
- !590 Backport CVEs and bugfixes
- net/sched: Retire tcindex classifier
- drm/vmwgfx: Validate the box size for the snooped cursor
- netfilter: nf_tables: nft_parse_register can return a negative value
- netfilter: nf_tables: validate registers coming from userspace.
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
- KVM: nVMX: add missing consistency checks for CR0 and CR4
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- xfs: __percpu_counter_compare() inode count debug too expensive
- xfs: fix memcpy fortify errors in EFI log format copying
- xfs: fix memcpy fortify errors in RUI log format copying
- xfs: fix memcpy fortify errors in CUI log format copying
- xfs: fix memcpy fortify errors in BUI log format copying
- xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
- xfs: allow setting full range of panic tags
- xfs: don't use BMBT btree split workers for IO completion
- xfs: fix extent busy updating
- xfs: get root inode correctly at bulkstat
- xfs: invalidate xfs_bufs when allocating cow extents
- xfs: attach dquots to inode before reading data/cow fork mappings
- xfs: invalidate block device page cache during unmount
- xfs: add selinux labels to whiteout inodes
- xfs: convert buf_cancel_table allocation to kmalloc_array
- xfs: don't leak xfs_buf_cancel structures when recovery fails
- xfs: refactor buffer cancellation table allocation
- xfs: fix type mismatches in the inode reclaim functions
- xfs: don't allow log writes if the data device is readonly
- x86/speculation: Allow enabling STIBP with legacy IBRS
- !578  Backport 5.10.150 LTS
- Revert "drm/amdgpu: make sure to init common IP before gmc"
- gcov: support GCC 12.1 and newer compilers
- f2fs: fix wrong condition to trigger background checkpoint correctly
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- ext4: continue to expand file system when the target size doesn't reach
- Revert "drm/amdgpu: use dirty framebuffer helper"
- Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net: ieee802154: return -EINVAL for unknown addr type
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- clk: bcm2835: Make peripheral PLLC critical
- usb: idmouse: fix an uninit-value in idmouse_open
- nvmet-tcp: add bounds check on Transfer Tag
- nvme: copy firmware_rev on each init
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- soundwire: intel: fix error handling on dai registration issues
- soundwire: cadence: Don't overwrite msg-&gt;buf during write commands
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- ata: libahci_platform: Sanity check the DT child nodes number
- blk-throttle: prevent overflow while calculating wait time
- staging: vt6655: fix potential memory leak
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- usb: host: xhci-plat: suspend/resume clks for brcm
- usb: host: xhci-plat: suspend and resume clocks
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- btrfs: scrub: try to fix super block errors
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
- ARM: dts: imx6sx: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- drm/amd/display: Remove interface for periodic interrupt 1
- drm/dp: Don't rewrite link config when setting phy test pattern
- mmc: sdhci-msm: add compatible string check for sdm670
- drm/meson: explicitly remove aggregate driver at module unload time
- drm/amdgpu: fix initial connector audio value
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
- platform/chrome: cros_ec: Notify the PM of wake events during resume
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- drm/vc4: vec: Fix timings for VEC modes
- drm: bridge: dw_hdmi: only trigger hotplug event on link change
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails
- drm/amd/display: fix overflow on MIN_I64 definition
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm: Use size_t type for len variable in drm_copy_field()
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- Bluetooth: L2CAP: Fix user-after-free
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- can: bcm: check the result of can_send() in bcm_can_tx()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- regulator: core: Prevent integer underflow
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- tcp: annotate data-race around tcp_md5sig_pool_populated
- openvswitch: Fix overreporting of drops in dropwatch
- openvswitch: Fix double reporting of drops in dropwatch
- bpftool: Clear errno after libcap's checks
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- NFSD: fix use-after-free on source server when doing inter-server copy
- NFSD: Return nfserr_serverfault if splice_ok but buf-&gt;pages have data
- x86/entry: Work around Clang __bdos() bug
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
- rcu: Back off upon fill_page_cache_func() allocation failure
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
- f2fs: fix to account FS_CP_DATA_IO correctly
- f2fs: fix to avoid REQ_TIME and CP_TIME collision
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
- crypto: cavium - prevent integer overflow loading firmware
- crypto: marvell/octeontx - prevent integer overflows
- kbuild: rpm-pkg: fix breakage when V=1 is used
- kbuild: remove the target in signal traps when interrupted
- tracing: kprobe: Make gen test module work in arm and riscv
- tracing: kprobe: Fix kprobe event gen test module on exit
- iommu/iova: Fix module config properly
- crypto: qat - fix DMA transfer direction
- crypto: qat - use pre-allocated buffers in datapath
- crypto: qat - fix use of 'dma_map_single'
- crypto: inside-secure - Change swab to swab32
- crypto: ccp - Release dma channels before dmaengine unrgister
- crypto: akcipher - default implementation for setting a private key
- iommu/omap: Fix buffer overflow in debugfs
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
- crypto: sahara - don't sleep when in softirq
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/math_emu/efp: Include module.h
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- clk: ast2600: BCLK comes from EPLL
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: baikal-t1: Add SATA internal ref clock buffer
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- mfd: sm501: Add check for platform_driver_register()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
- fsi: core: Check error number after calling ida_simple_get
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- serial: 8250: Fix restoring termios speed after suspend
- firmware: google: Test spinlock on panic path to avoid lockups
- staging: vt6655: fix some erroneous memory clean-up loops
- phy: qualcomm: call clk_disable_unprepare in the error handling
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- serial: 8250: Toggle IER bits on only after irq has been set up
- serial: 8250: Add an empty line and remove some useless {}
- drivers: serial: jsm: fix some leaks in probe
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- xhci: Don't show warning for reinit on known broken suspend
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
- RDMA/cm: Use SLID in the work completion as the DLID in responder side
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- md: Replace snprintf with scnprintf
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- ata: fix ata_id_has_dipm()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- mtd: rawnand: fsl_elbc: Fix none ECC mode
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- dyndbg: drop EXPORTed dynamic_debug_exec_queries
- dyndbg: let query-modname override actual module name
- dyndbg: fix module.dyndbg handling
- dyndbg: fix static_branch manipulation
- dmaengine: hisilicon: Add multi-thread support for a DMA channel
- dmaengine: hisilicon: Fix CQ head update
- dmaengine: hisilicon: Disable channels when unregister hisi_dma
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- RDMA/rxe: Fix the error caused by qp-&gt;sk
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
- tty: xilinx_uartps: Fix the ignore_status
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- HSI: omap_ssi_port: Fix dma_map_sg error check
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: sprd: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: qoriq: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: meson: Hold reference returned by of_get_parent()
- usb: common: debug: Check non-standard control requests
- usb: common: move function's kerneldoc next to its definition
- usb: common: add function to get interval expressed in us unit
- usb: common: Parse for USB SSP genXxY
- usb: ch9: Add USB 3.2 SSP attributes
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- iio: inkern: only release the device node when done with it
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
- ia64: export memory_add_physaddr_to_nid to fix cxl build error
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node'
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ALSA: dmaengine: increment buffer pointer atomically
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- drm/omap: dss: Fix refcount leak bugs
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- ASoC: rsnd: Add check for rsnd_mod_power_on
- drm/bridge: megachips: Fix a null pointer dereference bug
- drm: fix drm_mipi_dbi build errors
- platform/x86: msi-laptop: Fix resource cleanup
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- ASoC: tas2764: Fix mute/unmute
- ASoC: tas2764: Drop conflicting set_bias_level power setting
- ASoC: tas2764: Allow mono streams
- platform/chrome: fix memory corruption in ioctl
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
- drm/dp_mst: fix drm_dp_dpcd_read return value checks
- drm/bridge: parade-ps8640: Fix regulator supply order
- drm/mipi-dsi: Detach devices when removing the host
- drm/bridge: Avoid uninitialized variable warning
- drm: bridge: adv7511: fix CEC power down control register offset
- once: add DO_ONCE_SLOW() for sleepable contexts
- net/ieee802154: reject zero-sized raw_sendmsg()
- net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- spi: Ensure that sg_table won't be used after being freed
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
- spi: s3c64xx: Fix large transfers with DMA
- netfilter: nft_fib: Fix for rpath check with VRF devices
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- i2c: mlxbf: support lock mechanism
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
- x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
- x86/microcode/AMD: Track patch allocation size explicitly
- wifi: ath11k: fix number of VHT beamformee spatial streams
- Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
- bpf: Ensure correct locking around vulnerable function find_vpid()
- net: fs_enet: Fix wrong check in do_pd_setup
- wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- spi: meson-spicc: do not rely on busy flag in pow2 clk ops
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- selftests/xsk: Avoid use-after-free on ctx
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
- Bluetooth: btusb: fix excessive stack usage
- Bluetooth: btusb: Fine-tune mt7663 mechanism.
- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- bpftool: Fix a wrong type cast in btf_dumper_int
- wifi: mac80211: allow bw change during channel switch in mesh
- leds: lm3601x: Don't use mutex after it was destroyed
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- nfsd: Fix a memory leak in an error handling path
- objtool: Preserve special st_shndx indexes in elf_update_symbol
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
- MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- MIPS: SGI-IP27: Free some unused memory
- sh: machvec: Use char[] for section boundaries
- userfaultfd: open userfaultfds with O_RDONLY
- selinux: use "grep -E" instead of "egrep"
- smb3: must initialize two ACL struct fields to zero
- drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
- drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- drm/nouveau/kms/nv140-: Disable interlacing
- staging: greybus: audio_helper: remove unused and wrong debugfs usage
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- media: cedrus: Set the platform driver data earlier
- efi: libstub: drop pointless get_memory_map() call
- thunderbolt: Explicitly enable lane adapter hotplug events at startup
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- ring-buffer: Add ring_buffer_wake_waiters()
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Allow splice to read previous partially read pages
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- livepatch: fix race between fork and KLP transition
- ext4: update 'state-&gt;fc_regions_size' after successful memory allocation
- ext4: fix potential memory leak in ext4_fc_record_regions()
- ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- ext4: fix miss release buffer head in ext4_fc_write_inode
- ext4: place buffer head allocation before handle start
- ext4: don't increase iversion counter for ea_inodes
- ext4: make ext4_lazyinit_thread freezable
- ext4: avoid crash when inline data creation follows DIO write
- jbd2: add miss release buffer head in fc_do_one_pass()
- jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
- jbd2: fix potential buffer head reference count leak
- jbd2: wake up journal waiters in FIFO order, not LIFO
- hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
- hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
- hardening: Clarify Kconfig text for auto-var-init
- f2fs: fix to do sanity check on summary info
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: increase the limit for reserve_root
- btrfs: fix race between quota enable and quota rescan ioctl
- scsi: qedf: Populate sysfs attributes for vport
- powerpc/boot: Explicitly disable usage of SPE instructions
- powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- mm/mmap: undo -&gt;mmap() when arch_validate_flags() fails
- drm/udl: Restore display mode on resume
- drm/virtio: Check whether transferred 2D BO is shmem
- nvme-pci: set min_align_mask before calculating max_hw_sectors
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- riscv: Pass -mno-relax only on lld &lt; 15.0.0
- riscv: Make VM_WRITE imply VM_READ
- riscv: Allow PROT_WRITE-only mmap()
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- RISC-V: Make port I/O string accessors actually work
- regulator: qcom_rpm: Fix circular deferral regression
- hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
- ASoC: wcd934x: fix order of Slimbus unprepare/disable
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
- HID: multitouch: Add memory barriers
- fs: dlm: handle -EBUSY first in lock arg validation
- fs: dlm: fix race between test_bit() and queue_work()
- mmc: sdhci-sprd: Fix minimum clock limit
- can: kvaser_usb_leaf: Fix CAN state after restart
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb: Fix use of uninitialized completion
- usb: add quirks for Lenovo OneLink+ Dock
- iio: pressure: dps310: Reset chip after timeout
- iio: pressure: dps310: Refactor startup procedure
- iio: adc: ad7923: fix channel readings for some variants
- iio: ltc2497: Fix reading conversion results
- iio: dac: ad5593r: Fix i2c read protocol requirements
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- cifs: destage dirty pages before re-reading them for cache=none
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: oss: Fix potential deadlock at unregistration</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.30.0.106" date="1682510400">- !631 Backport CVEs and bugfixes
- bonding: Fix memory leak when changing bond type to Ethernet
- bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
- bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
- rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
- mm: mem_reliable: Fix blank space issue in reliable_report_usage()
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: detect self referencing btree sibling pointers
- xfs: introduce xfs_buf_daddr()
- xfs: move kernel-specific superblock validation out of libxfs
- xfs: bound maximum wait time for inodegc work
- xfs: introduce xfs_inodegc_push()
- xfs: flush inodegc workqueue tasks before cancel
- xfs: drop async cache flushes from CIL commits.
- xfs: limit iclog tail updates
- xfs: need to see iclog flags in tracing
- io_uring: ensure that io_init_req() passes in the right issue_flags
- io_uring: add missing lock in io_get_file_fixed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
</package>
<package pkgid="46f34ad74265e4ee3d132f8ccd11bac4f8250dd3ab8659096e5777e87870d5c9" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.39.0.116.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.31.0.107" date="1683720000">- !721 Backport CVEs and bugfixes
- !694 [sync] PR-625: AMD: Fix build warning.
- USB: gadgetfs: Fix race between mounting and unmounting
- prlimit: do_prlimit needs to have a speculation check
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- ext4: only update i_reserved_data_blocks on successful block allocation
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- RDMA/core: Refactor rdma_bind_addr
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- scsi: dpt_i2o: Remove obsolete driver
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix double bpf_prog_put on error case in map_link
- bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
- bpf, sockmap: Attach map progs to psock early for feature probes
- bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
- bpf, sockmap: Fix race in ingress receive verdict with redirect to self
- kabi: Fix kabi breakage without build warning.
- Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
</package>
<package pkgid="4b54ad47d9e9a30473f8d2e4c4f2c4eb9bb06ba8bf05d14fc93c53c207c2c214" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.40.0.117.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.32.0.108" date="1684238400">- !774 Backport CVEs and bugfixes
- filemap: Correct the conditions for marking a folio as accessed
- Revert "filemap: Correct the conditions for marking a folio as accessed"
- netrom: Fix use-after-free caused by accept on already connected socket
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
- fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
- fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
- fs/ntfs3: Validate data run offset
- xfs: buffer pins need to hold a buffer reference
- ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
- fix kabi broken due to import new inode operation get_inode_acl
- ovl: enable RCU'd -&gt;get_acl()
- vfs: add rcu argument to -&gt;get_acl() callback
- bpf: add missing header file include
- uaccess: Add speculation barrier to copy_from_user()
- !685 [sync] PR-675: driver/hifc&amp;hinic: Fix compile error in allyesconfigs
- scsi/hifc: Fix compile error in allyesconfigs
- net/hinic: Fix compile error in allyesconfigs</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.33.0.109" date="1684843200">- !801 Backport CVEs
- netfilter: nf_tables: deactivate anonymous set from preparation phase
- xfs: verify buffer contents when we skip log replay
- !779 [sync] PR-768: Backport 5.10.151 LTS
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- kbuild: Unify options for BTF generation for vmlinux and modules
- kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
- kbuild: Quote OBJCOPY var to avoid a pahole call break the build
- bpf: Generate BTF_KIND_FLOAT when linking vmlinux</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="2d26ce1b887280fd5ce485ad7da6c99471f606eabc20313fcc8251748cb49b37" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.41.0.119.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.34.0.110" date="1685534400">- !861 Backport CVEs and bugfixes
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
- cgroup: Stop task iteration when rebinding subsystem
- sched/topology: Fix exceptional memory access in sd_llc_free_all()
- block: Fix the partition start may overflow in add_partition()
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
- iomap: don't invalidate folios after writeback errors
- iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
- iomap: Don't create iomap_page objects for inline files
- iomap: Permit pages without an iop to enter writeback
- md: fix kabi broken in struct mddev
- md: use interruptible apis in idle/frozen_sync_thread
- md: wake up 'resync_wait' at last in md_reap_sync_thread()
- md: refactor idle/frozen_sync_thread()
- md: add a mutex to synchronize idle and frozen in action_store()
- md: refactor action_store() for 'idle' and 'frozen'
- Revert "md: unlock mddev before reap sync_thread in action_store"
- md: unlock mddev before reap sync_thread in action_store
- block: fix wrong mode for blkdev_put() from disk_scan_partitions()
- block: fix scan partition for exclusively open device again
- block: merge disk_scan_partitions and blkdev_reread_part</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
</package>
<package pkgid="2dd2bc03ee61f017773d9ca58b2e41214c8740f262c7939ff11dad4ad090e695" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.42.0.120.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.35.0.111" date="1686139200">- !905 [sync] PR-903: backport block bugfix
- !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
- !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
- tcp: restrict net.ipv4.tcp_app_win
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- config: Disable CONFIG_EULER_FS by default
- !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
- jbd2: remove t_checkpoint_io_list
- jbd2: recheck chechpointing non-dirty buffer
- !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- md/raid10: fix incorrect done of recovery
- md/raid10: fix null-ptr-deref in raid10_sync_request
- block/badblocks: fix badblocks loss when badblocks combine
- block/badblocks: fix the bug of reverse order
- md: fix unexpected changes of return value in rdev_set_badblocks
- md/raid10: fix io hung in md_wait_for_blocked_rdev()
- block: Only set bb-&gt;changed when badblocks changes
- md/raid10: fix incorrect counting of rdev-&gt;nr_pending
- md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
- md/raid10: fix uaf if replacement replaces rdev
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- md/raid10: prioritize adding disk to 'removed' mirror
- md: fix io loss when remove rdev fail
- md/raid10: fix a race between removing rdev and access conf-&gt;mirrors[i].rdev
- md/raid10: fix taks hung in raid10d
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
- md/raid10: fix softlockup in raid10_unplug
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- md: fix sysfs duplicate file while adding rdev
- md: replace invalid function flush_rdev_wq() with flush_workqueue()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- block: don't allow the same type rq_qos add more than once
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- blk-iocost: don't allow to configure bio based device
- !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
- arm64: kdump: Avoid reserving low memory repeatedly</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
</package>
<package pkgid="63c87b91575b002826f6c5da7d41ae6c97536632ce2aeb43cae54eaae6b79e7d" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.43.0.121.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.36.0.112" date="1686744000">- !1104 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1109 [sync] PR-1090:  fs/ntfs3: Check fields while reading
- fs/ntfs3: Check fields while reading
- power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
- !1062  Support dynamic_hugetlb on arm64 and fix some bug
- !1058 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
- mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
- mm/dynamic_hugetlb: set PagePool to bad page
- mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
- mm/dynamic_hugetlb: isolate hugepage without dissolve
- mm/dynamic_hugetlb: support dynamic hugetlb on arm64
- mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
- !1021 [sync] PR-978:  io_uring: fix the problem of running
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- !1051 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
- scripts: Fix issue of module signing with openssl 3.x
- !995 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
- !1000 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
- !1017 [sync] PR-944:  nbd: get config_lock before sock_shutdown
- !1011 [sync] PR-924:  dm: add disk before alloc dax
- !1014 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- !951 [sync] PR-929:  xfs: rework feature flags
- !972 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
- !987 [sync] PR-954:  block: iocost bugfix
- !984 [sync] PR-946:  icost bugfix
- kernel: don't call do_exit() for PF_IO_WORKER threads
- x86/process: setup io_threads more like normal user space threads
- arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
- arch: setup PF_IO_WORKER threads like PF_KTHREAD
- nbd: get config_lock before sock_shutdown
- dm thin: Fix ABBA deadlock by resetting dm_bufio_client
- dm: add disk before alloc dax
- hikey9xx: Fixed incorrect use of kfree to free sreg
- ubi: Fix deadlock caused by recursively holding work_sem
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- !976 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
- block: fix order error in blk_release_queue
- block: fix null-pointer dereference in ioc_pd_init
- blk-iocost: dispatch all throttled bio in ioc_pd_offline
- blk-iocost: don't throttle bio if iocg is offlined
- blk-iocost: track whether iocg is still online
- blk-iocost: fix UAF in ioc_pd_free
- x86/unwind: Fix check_paravirt() calls orc_find() before declaration
- x86/unwind: Fix orc entry for paravirt {save,restore}_fl
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
- xfs: kill xfs_sb_version_has_v3inode()
- xfs: introduce xfs_sb_is_v5 helper
- xfs: remove unused xfs_sb_version_has wrappers
- xfs: convert xfs_sb_version_has checks to use mount features
- xfs: convert scrub to use mount-based feature checks
- xfs: open code sb verifier feature checks
- xfs: convert xfs_fs_geometry to use mount feature checks
- xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
- xfs: convert remaining mount flags to state flags
- xfs: convert mount flags to features
- xfs: consolidate mount option features in m_features
- xfs: replace xfs_sb_version checks with feature flag checks
- xfs: reflect sb features in xfs_mount
- xfs: rework attr2 feature and mount options
- xfs: rename xfs_has_attr()
- xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
- xfs: log items should have a xlog pointer, not a mount
- xfs: fix incorrect error-out in xfs_remove</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
</package>
<package pkgid="2ed0a0c56995c164868a4b39ac3020a604047baf5d51560fbedc8ba8ecd6296d" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.44.0.122.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.37.0.113" date="1687262400">- !1164 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
- !1168 [sync] PR-1162:  fbcon: Check font dimension limits
- fbcon: Check font dimension limits
- proc: allow pid_revalidate() during LOOKUP_RCU
- !582 mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
- !1146 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
- gfs2: Don't deref jdesc in evict
- !1025 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
- !1072 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
- !1129 [sync] PR-1077:  drm/qxl: Fix missing free_irq
- drm/qxl: Fix missing free_irq
- xfrm: Reinject transport-mode packets through workqueue
- locking/rwsem: Prevent potential lock starvation
- locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
- locking/rwsem: Better collate rwsem_read_trylock()
- mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
</package>
<package pkgid="60bf0044033e56c75c5ccf53fd45d251900828ab396b021bf37003295bbecc41" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.45.0.123.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.38.0.114" date="1687867200">- !1192 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1248 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
- hugetlb: fix hugepages_setup when deal with pernode
- hugetlb: fix wrong use of nr_online_nodes
- !1239 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
- relayfs: fix out-of-bounds access in relay_file_read
- !1210 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
- !1233 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
- !1225 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
- media: rkvdec: fix use after free bug in rkvdec_remove
- !1199 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
- nbd: fix incomplete validation of ioctl arg
- nbd: validate the block size in nbd_set_size
- memcg: fix implicit declaration of memcg_print_bad_task()
- memstick: r592: Fix UAF bug in r592_remove due to race condition
- !1179 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
- MAINTAINERS: update openEuler/MAINTAINERS for LoongArch</changelog>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
</package>
<package pkgid="639569465b35ce2223de08cde18aa9dfdb5380ea2d9e10e57771ce39ee7e2288" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.46.0.124.oe2203sp1"/>
  <changelog author="Shi Kemeng &lt;shikemeng@huawei.com&gt; - 5.10.0-136.38.0.115" date="1688040000">- use full version-release instead of devel_release for mkgrub-menu</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
</package>
<package pkgid="ecde410cce9c2388ef3711c1a780ae0ec0e549499174e55de713bea58878d3e8" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.47.0.125.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.39.0.116" date="1688558400">- !1251 [sync] PR-1191:  fix memory reliable related issues
- !1230 [sync] PR-1194:  fix memleak with efi_fake_mem
- !1275 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1302 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1305 [sync] PR-1269:  arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1300 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- !1265 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
- !1188 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
- !1256 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- efi: Disable mirror feature during crashkernel
- mm: mem_reliable: Update reliable page counter to zero if underflows
- mm: mem_reliable: Fix reliable page counter mismatch problem
- config: Disable EFI_FAKE_MEMMAP support for arm64 by default
- efi: Fix UAF for arm64 when enable efi_fake_mem
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
</package>
<package pkgid="45ed1e0fd84ecc6cc1e8df3c01af71d11e9a554f752f93b5a6f1f25a5006a1db" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.48.0.126.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.40.0.117" date="1689076800">- !1367 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
- !1363 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- io_uring: hold uring mutex around poll removal
- ipvlan:Fix out-of-bounds caused by unclear skb-&gt;cb
- !1343 [sync] PR-1272:  xfs: fix some problems recently
- xfs: fix uninitialized variable access
- xfs: set XFS_FEAT_NLINK correctly
- xfs: don't leak perag when growfs fails
- xfs: factor out xfs_destroy_perag()
- xfs: fix warning in xfs_vm_writepages()
- xfs: don't leak intent item when recovery intents fail
- xfs: factor out xfs_defer_pending_abort
- xfs: fix mounting failed caused by sequencing problem in the log records
- Fix x86 provides error symbol</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
</package>
<package pkgid="c479053e44d25330d6426e520cfd53eaefef760af7f3b7762993a3adde07e720" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.49.0.127.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.41.0.118" date="1689768000">- !1290 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
- !1456 [sync] PR-1358:  Remove DECnet support from kernel
- !1439 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1460 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
- !1463 [sync] PR-1436: Fix CVE-2023-3117
- !1318 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- loop: loop_set_status_from_info() check before assignment
- Remove DECnet support from kernel
- netfilter: nf_tables: do not ignore genmask when looking up chain by id
- !1420 [sync] PR-1415:  Fix generic/299 fail
- !1378 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
- ext4: Add debug message to notify user space is out of free
- Revert "ext4: Stop trying writing pages if no free blocks generated"
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !759 【kernel-openEuler-22.03-LTS-SP1】kernel：fix a type error with 5.10 kernel on openEuler 22.03 LTS SP1 system
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- !1389 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
- !1392 [sync] PR-1376:  jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- !1308 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
- jbd2: Check 'jh-&gt;b_transaction' before remove it from checkpoint
- quota: simplify drop_dquot_ref()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- quota: add new helper dquot_active()
- quota: rename dquot_active() to inode_quota_active()
- quota: factor out dquot_write_dquot()
- Merge branch 'openEuler-22.03-LTS-SP1' of https://gitee.com/openeuler/kernel into openEuler-22.03-LTS-SP1
- !1329 [sync] PR-1325:  jbd2: fix several checkpoint
- !1332 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
- dm thin: fix deadlock when swapping to thin device
- blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
- blk-wbt: make enable_state more accurate
- !1340 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
- ext4: turning quotas off if mount failed after enable quotas
- ext4: Stop trying writing pages if no free blocks generated
- jbd2: fix checkpoint cleanup performance regression
- jbd2: remove __journal_try_to_free_buffer()
- jbd2: fix a race when checking checkpoint buffer busy
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- jbd2: remove journal_clean_one_cp_list()
- nbd: fix null-ptr-dereference while accessing 'nbd-&gt;config'
- nbd: factor out a helper to get nbd_config without holding 'config_lock'
- nbd: fold nbd config initialization into nbd_alloc_config()
- cgroup: always put cset in cgroup_css_set_put_fork
- drm/msm/dpu: Add check for pstates
- spdxcheck.py: Fix a type error</changelog>
  <changelog author="Chunsheng Luo &lt;luochunsheng@huawei.com&gt; - 5.10.0-136.41.0.119" date="1689768001">- Fix error provides</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
</package>
<package pkgid="9d91423a6bbcac97b46a7db6173f587da25171361fe020c9167f20a208c43827" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.50.0.129.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.42.0.120" date="1690286400">- !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
- !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
- vc_screen: modify vcs_size() handling in vcs_read()
- vc_screen: don't clobber return value in vcs_read
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
- !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
- ipv6/addrconf: fix a potential refcount underflow for idev
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
- ksmbd: fix memleak in session setup
- bpf: Fix incorrect verifier pruning due to missing register precision taints</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
</package>
<package pkgid="f8da39cd4ac0635938947e5ba4ee97be09cd6d5b6db658cd87f943b52c24eca8" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.51.0.130.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.43.0.121" date="1691064000">- !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
- !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
- !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
- net/sched: cls_u32: Fix reference counter leak leading to overflow
- !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
- binder: fix UAF caused by faulty buffer cleanup
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
- ksmbd: fix wrong UserName check in session_user
- !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
- !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
- !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
- !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
- !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
- mm: memcontrol: fix cannot alloc the maximum memcg ID
- block: don't set GD_NEED_PART_SCAN if scan partition failed
- dm: don't lock fs when the map is NULL during suspend or resume
- dm: don't lock fs when the map is NULL in process of resume
- dm: requeue IO if mapping table not yet available
- Revert "dm: make sure dm_table is binded before queue request"
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- dm stats: check for and propagate alloc_percpu failure</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
</package>
<package pkgid="3716523ab6ee0c5319fa9cc7aec5a09c7ab93ddbeeab410f46f03a7f3d545c16" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.52.0.131.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.44.0.122" date="1691582400">- !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
- !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- netfilter: nft_set_pipapo: fix improper element removal
- !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
- !1644 [sync] PR-1605:  CVE-2023-38430
- ksmbd: fix out-of-bound read in deassemble_neg_contexts()
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: validate smb request protocol id
- ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
</package>
<package pkgid="d13075e6a58f14659dc587df56a579b0f48c9f20ff0d2116ce2efa7259151522" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.53.0.132.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.45.0.123" date="1692100800">- !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
- !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
- Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
- !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
- cxgb4: fix use after free bugs caused by circular dependency problem
- !1745 [sync] PR-1727:  add support for timer_shutdown() api
- !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- ksmbd: fix out of bounds read in smb2_sess_setup
- timers: Keep del_timer[_sync]() exported
- timers: Provide timer_shutdown[_sync]()
- timers: Add shutdown mechanism to the internal functions
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
- timers: Silently ignore timers with a NULL function
- timers: Rename del_timer() to timer_delete()
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Use del_timer_sync() even on UP
- timers: Update kernel-doc for various functions
- timers: Replace BUG_ON()s
- timers: Get rid of del_singleshot_timer_sync()
- sw64: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
- ARM: spear: Do not use timer namespace for timer_shutdown() function
- !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
- !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- xfrm: add NULL check in xfrm_update_ae_params
- media: usb: siano: Fix warning due to null work_func_t function pointer
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
- nfc: llcp: simplify llcp_sock_connect() error paths</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
</package>
<package pkgid="c31b8bca0885a5dc78da29523ba379285a384c74bf326f0e303cafb2db629195" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.54.0.133.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.46.0.124" date="1692705600">- !1839  fix CVE-2023-20593 for openEuler
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/cpu/amd: Add a Zenbleed fix
- x86/cpu/amd: Move the errata checking functionality up
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
</package>
<package pkgid="ebb246d9effa6e0d366310b38fb7a87ba73a761d6303c475ec846f1a6009a6ff" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.55.0.134.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.47.0.125" date="1693310400">- !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
- !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
- !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
- !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
- net: tap_open(): set sk_uid from current_fsuid()
- net: tun_chr_open(): set sk_uid from current_fsuid()
- tcp: Reduce chance of collisions in inet6_hashfn().
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
- !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
- nbd: pass nbd_sock to nbd_read_reply() instead of index
- ksmbd: validate command request size
- ksmbd: validate command payload size
- xen/netback: Fix buffer overrun triggered by unusual packet</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
</package>
<package pkgid="e044626ad049ffed3ba5a31d3ace8fa1e2bc1b6f76bfaf65581fff18e6968523" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.56.0.135.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.48.0.126" date="1694001600">- !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
- !2010  block: don't get gendisk if queue has not been registered
- block: don't get gendisk if queue has not been registered
- !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
- !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
- ksmbd: fix out-of-bound read in smb2_write
- !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
- Fix the default return value of dm_pool_dec_data_range()
- !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
- exfat: check if filename entries exceeds max filename length
- ksmbd: fix racy issue from session setup and logoff
- ksmbd: Fix spelling mistake "excceed" -&gt; "exceeded"
- ksmbd: limit pdu length size according to connection status
- ksmbd: Implements sess-&gt;ksmbd_chann_list as xarray
- dm thin metadata: check fail_io before using data_sm</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
</package>
<package pkgid="47e8d29b2b80ff8e51544012cf798c090681e0bb159ea350c2857d8992a99a0d" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.57.0.136.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.49.0.127" date="1694606400">- !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
- !2138  netfilter: nf_tables: skip bound chain on rule flush
- !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
- netfilter: nf_tables: skip bound chain on rule flush
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
- !2114  Fixed 4 CVEs of the ksmbd
- !2077 [sync] PR-2065:  dm: switch to precise io accounting
- ksmbd: not allow guest user on multichannel
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: destroy expired sessions
- !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
- dm: switch to precise io accounting
- !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
- SUNRPC: don't pause on incomplete allocation
- net: hns3: only enable unicast promisc when mac table full
- !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
- ksmbd: validate session id and tree id in the compound request</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
</package>
<package pkgid="8c4f025df24e9a390d91da8c55538040003ec8fdccc20df3a724ac34e85a779b" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.58.0.137.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.49.0.128" date="1695038400">- Rename the PGP certificates</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
</package>
<package pkgid="b610f8603762868717da4b2a442d5aef57d38d24bdde0ba9d1d2c07f8f361def" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.59.0.138.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.50.0.129" date="1695211200">- !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2232 [sync] PR-2086:  fix CVE-2023-20588
- !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
- x86: Move gds_ucode_mitigated() declaration to header
- Documentation/x86: Fix backwards on/off logic about YMM support
- KVM: Add GDS_NO support to KVM
- x86/speculation: Add Kconfig option for GDS
- x86/speculation: Add force option to GDS mitigation
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
- jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
- !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
- !2152  io_uring: ensure IOPOLL locks around deferred work
- io_uring: ensure IOPOLL locks around deferred work
- x86/speculation: Add cpu_show_gds() prototype
- x86/speculation: Add Gather Data Sampling mitigation</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
</package>
<package pkgid="299a0bae4bf1028093e2220d61f306869f681fac6eb12e298c3960173e1e8c05" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.60.0.139.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.51.0.130" date="1697025600">- !2392  netfilter: nf_tables: disallow rule removal from chain binding
- netfilter: nf_tables: disallow rule removal from chain binding
- !2385  nf_table LTS
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
- netfilter: nf_tables: skip bound chain on rule flush
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nftables: rename set element data activation/deactivation functions
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
- netfilter: nf_tables: fix chain binding transaction logic
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
- netfilter: nf_tables: use net_generic infra for transaction data
- Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
- Revert "netfilter: nf_tables: skip bound chain on rule flush"
- Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
- Revert "netfilter: nf_tables: fix chain binding transaction logic"
- Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
- Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
- Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
- !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
- !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
- etmem: Fixed an issue where the module reference counting is incorrect
- !2250 [sync] PR-2224:  ext4: fix rec_len verify error
- ext4: fix rec_len verify error</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.52.0.131" date="1697544000">- !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
- net/sched: Retire rsvp classifier
- !1417  Replace the hulk patch with the lts patch
- !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
- sdei_watchdog: Avoid exception during sdei handler
- cgroup: Do not corrupt task iteration when rebinding subsystem
- Revert "cgroup: Stop task iteration when rebinding subsystem"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
</package>
<package pkgid="f276a5fd57d3decf88df6966ef82f8604aa763cfd44be8e7be3fcde9b9a8c9e7" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.61.0.141.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.53.0.132" date="1698753600">- !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
- !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
- !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
- net: xfrm: Fix xfrm_address_filter OOB read
- !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
- !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
- !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
- !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
- !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
- !2662  arm64: fix a concurrency issue in emulation_proc_handler()
- arm64: armv8_deprecated: fix unused-function error
- arm64: armv8_deprecated: rework deprected instruction handling
- arm64: armv8_deprecated: move aarch32 helper earlier
- arm64: armv8_deprecated move emulation functions
- arm64: armv8_deprecated: fold ops into insn_emulation
- arm64: rework EL0 MRS emulation
- arm64: factor insn read out of call_undef_hook()
- arm64: factor out EL1 SSBS emulation hook
- arm64: split EL0/EL1 UNDEF handlers
- arm64: allow kprobes on EL0 handlers
- arm64: rework BTI exception handling
- arm64: rework FPAC exception handling
- arm64: consistently pass ESR_ELx to die()
- arm64: die(): pass 'err' as long
- Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
- ubi: Refuse attaching if mtd's erasesize is 0
- !2648 [sync] PR-2641:  Fix CVE-2023-5717
- perf: Fix kabi breakage in struct perf_event
- perf: Disallow mis-matched inherited group reads
- !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
- !2570  Fix cgroup poll UAF
- !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
- USB: ene_usb6250: Allocate enough memory for full object
- igb: set max size RX buffer when store bad packet is enabled
- !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
- !2622 [sync] PR-2613:  CVE-2022-44033
- char: pcmcia: remove all the drivers
- tty: ipwireless: move Kconfig entry to tty
- !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
- xen/events: replace evtchn_rwlock with RCU
- ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
- ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
- ksmbd: send proper error response in smb2_tree_connect()
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- ksmbd: call rcu_barrier() in ksmbd_server_exit()
- ksmbd: fix racy issue under cocurrent smb2 tree disconnect
- sched/psi: Select KERNFS as needed
- kernfs: add stub helper for kernfs_generic_poll()
- sched/psi: use kernfs polling functions for PSI trigger polling
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ipv4: fix null-deref in ipv4_link_failure
- netfilter: xt_sctp: validate the flag_info count
- netfilter: nfnetlink_osf: avoid OOB read
- netfilter: xt_u32: validate user space input
- !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
- xfs: update the last_sync_lsn with ctx start lsn
- xfs: shutdown xfs once inode double free
- xfs: fix off-by-one-block in xfs_discard_folio()
- xfs: xfs_bmap_punch_delalloc_range() should take a byte range
- iomap: buffered write failure should not truncate the page cache
- xfs,iomap: move delalloc punching to iomap
- xfs: use byte ranges for write cleanup ranges
- xfs: punching delalloc extents on write failure is racy
- xfs: longest free extent no need consider postalloc
- xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
- xfs: block reservation too large for minleft allocation
- xfs: set minleft correctly for randomly sparse inode allocations
- xfs: shutdown to ensure submits buffers on LSN boundaries
- xfs: don't verify agf length when log recovery
- xfs: Remove redundant assignment to busy
- xfs: remove redundant pointer lip
- xfs: remove redundant initializations of pointers drop_leaf and save_leaf
- xfs: xfs_trans_cancel() path must check for log shutdown
- xfs: fix bounds check in xfs_defer_agfl_block()
- xfs: AGF length has never been bounds checked
- xfs: journal geometry is not properly bounds checked
- xfs: don't block in busy flushing when freeing extents
- xfs: allow extent free intents to be retried
- xfs: pass alloc flags through to xfs_extent_busy_flush()
- Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
- xfs: use deferred frees for btree block freeing
- xfs: don't reverse order of items in bulk AIL insertion
- xfs: validate block number being freed before adding to xefi
- xfs: validity check agbnos on the AGFL
- xfs: pass xfs_extent_free_item directly through the log intent code
- xfs: remove unused parameter from refcount code
- xfs: reduce the size of struct xfs_extent_free_item
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later
- xfs: create slab caches for frequently-used deferred items
- xfs: compact deferred intent item structures
- xfs: rename _zone variables to _cache
- xfs: remove kmem_zone typedef
- xfs: remove xfs_setattr_time() declaration
- xfs: use setattr_copy to set vfs inode attributes
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: don't assert fail on perag references on teardown
- xfs: fix dir3 block read verify fail during log recover
- xfs: propagate the return value of xfs_log_force() to avoid soft lockup
- xfs: keep growfs sb log item active until ail flush success
- !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
- ext4: do not mark inode dirty every time when appending using delalloc
- xfs: atomic drop extent entries when inactiving attr
- xfs: factor out __xfs_da3_node_read()
- xfs: fix a UAF in xfs_iflush_abort_clean
- xfs: fix a UAF when inode item push
- xfs: fix the problem of mount failure caused by not refreshing mp-&gt;m_sb
- iomap: iomap: fix memory corruption when recording errors during writeback
- xfs: fix hung when transaction commit fail in xfs_inactive_ifree
- xfs: fix dead loop when do mount with IO fault injection
- xfs: fix ag count overflow during growfs
- xfs: account extra freespace btree splits for multiple allocations
- xfs: force shutdown xfs when xfs_attr_inactive fails
- xfs: fix negative array access in xfs_getbmap
- xfs: fix BUG_ON in xfs_getbmap()
- xfs: use iomap_valid method to detect stale cached iomaps
- iomap: write iomap validity checks
- xfs: write page faults in iomap are not buffered writes
- xfs: fix exception caused by unexpected illegal bestcount in leaf dir
- Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
- xfs: don't expose internal symlink metadata buffers to the vfs
- xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
- xfs: fix maxlevels comparisons in the btree staging code
- xfs: sb verifier doesn't handle uncached sb buffer
- xfs: fallocate() should call file_modified()
- xfs: remove XFS_PREALLOC_SYNC
- xfs: shutdown during log recovery needs to mark the log shutdown
- xfs: xfs_trans_commit() path must check for log shutdown
- xfs: xfs_do_force_shutdown needs to block racing shutdowns
- xfs: log shutdown triggers should only shut down the log
- xfs: shutdown in intent recovery has non-intent items in the AIL
- xfs: AIL should be log centric
- xfs: increase rename inode reservation
- xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
- xfs: check return codes when flushing block devices
- xfs: remove xfs_blkdev_issue_flush
- xfs: fix NULL pointer dereference in xfs_getbmap()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
</package>
<package pkgid="ccdc1a7b53901645337726daf9c671f67718ee3287bc356f08219f270dcc34ec" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.62.0.142.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.54.0.133" date="1699444800">- !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2740 [sync] PR-2443:  CVE-2023-37453
- !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
- USB: core: Fix oversight in SuperSpeed initialization
- USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Unite old scheme and new scheme descriptor reads
- nvmet-tcp: Fix a possible UAF in queue intialization setup
- !2702 [sync] PR-2672:  fix CVE-2023-46813
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
- !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
- x86/sev: Check for user-space IOIO pointing to kernel space
- x86/sev: Check IOBM for IOIO exceptions from user-space
- x86/sev: Disable MMIO emulation from user mode
- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
</package>
<package pkgid="5462239f4bcf1d2b2d59b9ece490bdad3a2bc0c378a3204547a53bfbd1d9d922" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.63.0.143.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.55.0.134" date="1700049600">- !2859  bugfix for CVE-2022-45884
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvbdev: Fix memleak in dvb_register_device
- !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
- drm/qxl: fix UAF on handle creation
- !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
- cpufreq: make interface functions and lock holding state clear
- cpufreq: Abort show()/store() for half-initialized policies</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
</package>
<package pkgid="007f01af5a52527511bba5937b8e7fe2537d9f70550aae00c9a408283e99f8b5" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.64.0.144.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.56.0.135" date="1701259200">- !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
- !832 [sync] PR-601: fix  test_vmxon failed
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- !2975 Add script to check &amp; update openeuler_defconfig
- config: update openeuler_defconfig for arm64
- config: update openeuler_defconfig for x86
- kconfig: Add script to check &amp; update openeuler_defconfig
- Revert "kconfig: Add script to update openeuler_defconfig"
- !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
- !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
- !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
- !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
- !2653 [sync] PR-2377:  tracing: Backport bugfixes
- !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
- !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
- !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
- !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
- !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
- !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
- !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
- !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
- !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
- !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
- ext4: recheck buffer valid after page unlock
- memcg: dump memory.stat during cgroup OOM for v1
- memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
- seq_buf: Add seq_buf_do_printk() helper
- seq_buf: Add seq_buf_terminate() API
- ring-buffer: Do not attempt to read past "commit"
- ring-buffer: Do not swap cpu_buffer during resize process
- preempt/dynamic: Fix setup_preempt_mode() return value
- Huawei BMA: To fix the bug in the iBMA driver code
- crypto:padata: Fix return err for PADATA_RESET
- tracing: Fix memleak due to race between current_tracer and trace
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- ring-buffer: Fix deadloop issue on reading trace_pipe
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- mm: disable kernelcore=mirror when no mirror memory
- arm64/mpam: fix missing kfree domain's ctrl_val arrray
- SUNRPC: Ensure that the gssproxy client can start in a connected state
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- bpf: cpumap: Fix memory leak in cpu_map_update_elem
- ubifs: Fix memory leak in do_rename
- ubifs: Free memory for tmpfile name
- ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
- net: sched: fix NULL pointer dereference in mq_attach
- KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
- kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
</package>
<package pkgid="ed70e7414f2c0030016f7e84c3db884155a9ba0ed2a31df5818cf2338720bf0f" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.65.0.145.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.57.0.136" date="1701777600">- !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
- !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- ksmbd: delete asynchronous work from list
- ksmbd: fix typo, syncronous-&gt;synchronous
- ksmbd: fix possible memory leak in smb2_lock()
- ksmbd: replace usage of found with dedicated list iterator variable
- !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
- !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
- scsi: fix kabi broken in struct Scsi_Host
- scsi: don't fail if hostt-&gt;module is NULL
- scsi: scsi_device_gets returns failure when the module is NULL.
- !3142 [sync] PR-2970:  Add error handle for add_disk
- block: Set memalloc_noio to false in the error path
- block: Fix minor range check in device_add_disk()
- block: clear -&gt;slave_dir when dropping the main slave_dir reference
- block: call blk_get_queue earlier in __device_add_disk
- block: check minor range in device_add_disk()
- block: fix memory leak for elevator on add_disk failure
- block: Fix the kabi change on blk_register_region
- block: Fix the kabi change in device_add_disk
- block: fix error unwinding in device_add_disk
- block: fix device_add_disk() kobject_create_and_add() error handling
- block: add error handling for device_add_disk / add_disk
- block: return errors from blk_register_region
- block: add the events* attributes to disk_attrs
- block: return errors from disk_alloc_events
- block: return errors from blk_integrity_add
- block: call blk_integrity_add earlier in device_add_disk
- block: fold register_disk into device_add_disk
- !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
- fs/dirty_pages: add last read check in seq_read_dirty()
- !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
- !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- fs/dirty_pages: fix some errors in seq_read_dirty()
- fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
- Revert "arm64/mpam: Fix mpam corrupt when cpu online"
- etmem: fix the div 0 problem in swapcache reclaim process</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
</package>
<package pkgid="e8be71748145824ded9ce6867a4ee8fa34ecfa4ef837db278c9f79a0b377fa44" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.66.0.146.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.58.0.137" date="1703678400">- !3625  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- !3622  netfilter: nft_set_pipapo: skip inactive elements during set walk
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
- netfilter: nft_set_pipapo: skip inactive elements during set walk
- !3595 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- !3581 [sync] PR-3577:  perf/core: Fix CVE-2023-6931
- perf: Fix perf_event_validate_size() lockdep splat
- perf: Fix perf_event_validate_size()
- !3293 [sync] PR-2843:  Add error handle for sd
- !3290 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- scsi: sd: Clean up sdkp if device_add_disk() failed
- scsi: sd: Add error handling support for add_disk()
- md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
- !3180 [sync] PR-2825:  Add error handle for driver
- !3016 [sync] PR-1203:  Revert "locking/rwsem: Prevent potential lock starvation"
- !3230 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
- fs: Fix error checking for d_hash_and_lookup()
- nbd: fix uaf in nbd_open
- mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
- mtd/ubi/block: Fix null pointer dereference issue in error path
- mtd/ubi/block: add error handling support for add_disk()
- ubi: use blk_mq_alloc_disk and blk_cleanup_disk
- scsi: sr: Add error handling support for add_disk()
- block/brd: add error handling support for add_disk()
- brd: convert to blk_alloc_disk/blk_cleanup_disk
- nvme: add error handling support for add_disk()
- nvme: use blk_mq_alloc_disk
- block: add a flag to make put_disk on partially initalized disks safer
- nbd: add error handling support for add_disk()
- nbd: fix order of cleaning up the queue and freeing the tagset
- nbd: use blk_mq_alloc_disk and blk_cleanup_disk
- loop: add error handling support for add_disk()
- loop: fix order of cleaning up the queue and freeing the tagset
- loop: use blk_mq_alloc_disk and blk_cleanup_disk
- blk-mq: fix an IS_ERR() vs NULL bug
- blk-mq: add the blk_mq_alloc_disk APIs
- block: add blk_alloc_disk and blk_cleanup_disk APIs
- Revert "locking/rwsem: Better collate rwsem_read_trylock()"
- Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
- Revert "locking/rwsem: Prevent potential lock starvation"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
</package>
<package pkgid="9808cf719884f424889bdc97b81e00e64b35e0532e681c87ec34fe356ba77452" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.67.0.147.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.59.0.138" date="1704888000">- !3854 [sync] PR-3694:  Fix tow CVEs of CIFS
- !3765 [sync] PR-3594:  CVE-2023-35827 patchset
- smb: client: fix potential OOB in smb2_dump_detail()
- smb: client: fix OOB in smbCalcSize()
- !3800 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
- !3825 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3798  md: protect md_thread with rcu
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- !3781 [sync] PR-3447:  dm: add error handling support for add_disk()
- !3783 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
- atm: Fix Use-After-Free in do_vcc_ioctl
- md: protect md_thread with rcu
- md/bitmap: factor out a helper to set timeout
- md/bitmap: always wake up md_thread in timeout_store
- dm-raid: remove useless checking in raid_message()
- md: factor out a helper to wake up md_thread directly
- md: do not return existing mddevs from mddev_find_or_alloc
- md: refactor mddev_find_or_alloc
- md: factor out a mddev_alloc_unit helper from mddev_find
- dm: add error handling support for add_disk()
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
</package>
<package pkgid="18870c049f7f3f299c262214ff1f09addb6b1daf2b2c9ef010a701c43ec46aec" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.68.0.148.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.60.0.139" date="1705492800">- !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
- !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
- !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
- !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
- net/rose: Fix Use-After-Free in rose_ioctl
- appletalk: Fix Use-After-Free in atalk_ioctl
- nvmet: nul-terminate the NQNs passed in the connect command
- !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
- livepatch/core: Disable support for replacing
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
</package>
<package pkgid="8347a3f529f9d6e48b268cd9595b49359dacdd2d3424c813aaf683fd3a52e739" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.69.0.149.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 5.10.0-136.60.0.140" date="1705752000">- remove bpftool from kernel package, now build bpftool from src-openeuler/bpftool</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
</package>
<package pkgid="a62c43fb435342b16ca5303d671462e6440b92aa7d57a18f2c4feead0b51745f" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.70.0.150.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.61.0.141" date="1706097600">- !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
- !4056  ext4: correct return value of ext4_convert_meta_bg
- !4060  ext4: synchronize the casefold bugfix from the mainline
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
- netfilter: nf_tables: Reject tables of unsupported family
- !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &amp;tx-&gt;lock
- !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
- !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
- tipc: fix a potential deadlock on &amp;tx-&gt;lock
- smb: client: fix OOB in receive_encrypted_standard()
- !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
- ext4: improve error handling from ext4_dirhash()
- ext4: reject casefold inode flag without casefold feature
- ext4: correct return value of ext4_convert_meta_bg
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- mm/filemap: avoid buffered read/write race to read inconsistent data</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
</package>
<package pkgid="441dcc941c8e669c7457afcd0dcf9c202a5573b531405dad17f6742daae6001a" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.71.0.151.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.62.0.142" date="1706702400">- !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
- !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- fs:/dcache.c: fix negative dentry limit not complete problem
- !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
- !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
- !4005  ext4: fix some ext4_lblk_t overflow issues
- drm/amdgpu: Fix potential fence use-after-free v2
- netlink: fix potential sleeping issue in mqueue_flush_file
- mm/dynamic_hugetlb: skip unexpected migration
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
</package>
<package pkgid="6b4205ccf90c577bf8ede5a163f48f069bf1c35fe1b7a586fe06406bdd96e482" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.72.0.152.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.63.0.143" date="1707220800">- !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
- !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
- ubifs: Queue up space reservation tasks if retrying many times
- !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
- !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
- io_uring/af_unix: disable sending io_uring over sockets
- !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
- drm/atomic: Fix potential use-after-free in nonblocking commits
- !3859 [sync] PR-3756:  md: mainline backport
- !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
- !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
- !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
- !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
- !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
- !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
- !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
- !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
- !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
- !4226 [sync] PR-4149:  block: remove precise_iostat
- !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
- ubifs: fix possible dereference after free
- ubi: block: Fix use-after-free in ubiblock_cleanup
- Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
- ipv6: init the accept_queue's spinlocks in inet6_create
- tcp: make sure init the accept_queue's spinlocks once
- net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
- block: remove precise_iostat
- drm/amdgpu: correct the amdgpu runtime dereference usage count
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- drm/radeon: possible buffer overflow
- md/raid1-10: fix casting from randomized structure in raid1_submit_write()
- md/raid1-10: limit the number of plugged bio
- md/raid1-10: don't handle pluged bio by daemon thread
- md/md-bitmap: add a new helper to unplug bitmap asynchrously
- md/raid1-10: submit write io directly if bitmap is not enabled
- md/raid1-10: factor out a helper to submit normal write
- md/raid1-10: factor out a helper to add bio to plug
- md/raid10: prevent soft lockup while flush writes
- md: raid1/raid10: drop pending_cnt
- md: drop queue limitation for RAID1 and RAID10
- Revert "md/raid10: fix softlockup in raid10_unplug"
- ida: Fix crash in ida_free when the bitmap is empty
- md: fix error handling in md_alloc
- md: Constify attribute_group structs
- md: fix mddev-&gt;kobj lifetime
- md: properly unwind when failing to add the kobject in md_alloc
- md: extend disks_mutex coverage
- md: add the bitmap group to the default groups for the md kobject
- md: add error handling support for add_disk()
- md: convert to blk_alloc_disk/blk_cleanup_disk
- md/raid10: fix improper BUG_ON() in raise_barrier()
- md: use msleep() in md_notify_reboot()
- md: fix double free of mddev-&gt;private in autorun_array()
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- nvme-pci: clear the prp2 field when not used
- nvme-pci: fix DMA direction of unmapping integrity data
- nvme-pci: fix timeout request state check</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
</package>
<package pkgid="2376d2870abcee2aaca790173942fdea8a106ca7e18cd9bdba317fb888bc96bc" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.73.0.153.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.64.0.144" date="1708516800">- !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
- !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
- !4592  sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- xen-netback: don't produce zero-size SKB frags
- !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
- trace: Fix kabi breakage in struct trace_event_file
- tracing: Fix uaf issue when open the hist or hist_debug file
- tracing: Have event inject files inc the trace array ref count
- tracing: Have trace_event_file have ref counters
- tracing: Increase trace array ref count on enable and filter files
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
- ipv6: fix kabi change in struct dst_ops
- ipv6: Document that max_size sysctl is deprecated
- ipv6: remove max_size check inline with ipv4
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- vdpa: add vmstate header file
- vhost-vdpa: add reset state params to indicate reset level
- vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
- vhost-vdpa: fix compile warnings
- arm64: openeuler_defconfig: add VDPA config
- vhost-vdpa: fix msi irq request err
- vhost-vdpa: Allow transparent MSI IOV
- export iommu_get_resv_regions and iommu_set_resv_regions
- vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
- vhost-vdpa: add uAPI for device migration status
- vdpa: add vdpa device migration status ops
- vhost-vdpa: add uAPI for device buffer
- vdpa: add device state operations
- vhost-vdpa: add uAPI for logging
- vdpa: add log operations
- tools include UAPI: Sync linux/vhost.h with the kernel sources
- vdpa: add get_backend_features vdpa operation
- virtio: fix virtio transitional ids
- virtio: update virtio id table, add transitional ids
- PCI/IOV: Add pci_iov_vf_id() to get VF index
- vhost_vdpa: support PACKED when setting-getting vring_base
- vhost_vdpa: tell vqs about the negotiated
- vhost_vdpa: fix unmap process in no-batch mode
- vhost-vdpa: use bind_mm/unbind_mm device callbacks
- vdpa: add bind_mm/unbind_mm callbacks
- vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
- vhost-vdpa: free iommu domain after last use during cleanup
- vhost-vdpa: uAPI to resume the device
- vhost-vdpa: Introduce RESUME backend feature bit
- vdpa: Add resume operation
- vhost_vdpa: fix the crash in unmap a large memory
- vhost-vdpa: fix an iotlb memory leak</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
</package>
<package pkgid="42850d8278e587a624f1c9d1fcc6bae6106f6248a3b791b4f04725c8d3155c59" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.74.0.154.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.65.0.145" date="1709035200">- !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
- !4682 [sync] PR-4662: v3  CVE-2023-52435
- !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
- net: Fix compile warning in skb_segment()
- net: prevent mss overflow in skb_segment()
- fs:/dcache.c: fix negative dentry flag warning in dentry_free
- scsi: core: Always send batch on reset or error handling command
- Revert "scsi: core: Add scsi_prot_ref_tag() helper"
- Revert "scsi: core: Introduce scsi_get_sector()"
- Revert "scsi: core: Make scsi_get_lba() return the LBA"
- Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
- Revert "scsi: core: Use a structure member to track the SCSI command submitter"
- Revert "scsi: core: Always send batch on reset or error handling command"
- scsi: core: Always send batch on reset or error handling command
- scsi: core: Use a structure member to track the SCSI command submitter
- scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: core: Make scsi_get_lba() return the LBA
- scsi: core: Introduce scsi_get_sector()
- scsi: core: Add scsi_prot_ref_tag() helper</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
</package>
<package pkgid="439cc1ba3059a02bded2a44f1b1c0a97f542daec159102061528f2d69abd26d9" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.75.0.155.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.66.0.146" date="1709726400">- !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
- !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
- apparmor: avoid crash when parsed profile name is empty
- net: openvswitch: limit the number of recursions from action sets
- !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
- !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
- !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- efivarfs: force RO when remounting if SetVariable is not supported
- !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- blk-mq: fix IO hang from sbitmap wakeup race
- !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
</package>
<package pkgid="19505b295f7dd154ff36cb3efc1617ec88a6433f9982b16b6682917ffb8a2d2b" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.76.0.156.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.67.0.147" date="1710331200">- !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
- !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
- !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
- !4831 [sync] PR-4803:  CVE-2024-26583
- f2fs: explicitly null-terminate the xattr list
- !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
- !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
- btrfs: fix double free of anonymous device after snapshot creation failure
- btrfs: do not ASSERT() if the newly created subvolume already got read
- !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
- !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
- !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
- !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
- !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
- net: rds: Fix possible NULL-pointer dereference
- net: fix possible store tearing in neigh_periodic_work()
- !4953  arm64: head.S: always initialize PSTATE
- dm: limit the number of targets and parameter size area
- sched: remove wait bookmarks
- filemap: remove use of wait bookmarks
- net/sched: act_ct: fix wild memory access when clearing fragments
- !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
- !4964 [sync] PR-4901:  fix CVE-2021-47036
- !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- !5006 [sync] PR-4979:  CVE-2021-47028
- !5014 [sync] PR-4991:  CVE-2023-52568
- x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- mt76: mt7915: fix txrate reporting
- mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
- !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- pmem: compile pmem legacy device while libnvdimm as a module
- udp: properly flush normal packet at GRO time
- udp: skip L4 aggregation for UDP tunnel packets
- arm64: head.S: always initialize PSTATE
- block: add check that partition length needs to be aligned with block size
- tls: fix race between tx work scheduling and socket close
- tls: fix race between async notify and socket close
- net: tls: factor out tls_*crypt_async_wait()
- tls: rx: simplify async wait
- uio: Fix use-after-free in uio_open
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- binder: fix use-after-free in shinker's callback</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
</package>
<package pkgid="29df359f6c4e79675dc6bef6fd74f7c07782790d0c0eb544d13ef06e12c8fd76" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.77.0.157.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.68.0.148" date="1710936000">- !5344  CVE-2023-52447
- !5366 v2  CVE-2023-52452
- !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
- bpf: Fix accesses to uninit stack slots
- bpf: Fix verification of indirect var-off stack access
- bpf: Allow reads from uninit stack
- bpf: expose bpf_strtol and bpf_strtoul to all program types
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf: verifier: Use copy_array for jmp_history
- bpf: verifier: Improve function state reallocation
- iommu/arm-smmu-v3: Disable ECMDQ before reset
- !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
- bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
- bpf: Defer the free of inner map when necessary
- bpf: Set need_defer as false when clearing fd array during map free
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
- !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
- powerpc/lib: Validate size for vector operations
- !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
- !4853 [sync] PR-4847:  btrfs: mainline backport
- ceph: fix deadlock or deadcode of misusing dget()
- !5204  Upgrade driver for Broadcom NIC BCM57414
- !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
- !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
- !5124 [sync] PR-5109:  CVE-2024-26586
- !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- net: bcmgenet: Restore phy_stop() depending upon suspend/close
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- net: nfc: llcp: Add lock when modifying device list
- nfc: nci: assert requested protocol is valid
- RDMA/srp: Do not call scsi_done() from srp_abort()
- !5166 [sync] PR-5117:  fix CVE-2023-52527
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- l2tp: pass correct message length to ip6_append_data
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- mlxsw: spectrum_acl_tcam: Fix stack corruption
- mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
- mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- RDMA/rxe: Return CQE error if invalid lkey was supplied
- btrfs: fix deadlock when cloning inline extents and using qgroups
- btrfs: do not start and wait for delalloc on snapshot roots on transaction commit</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
</package>
<package pkgid="5d15f1a109668a50467c3b064af8de77eb8269cc0863475bcdc3f0640a10abfb" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.78.0.158.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.69.0.149" date="1711540800">- !5534  media: pvrusb2: fix use after free on context disconnection
- !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
- media: pvrusb2: fix use after free on context disconnection
- !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- iomap: add support to track dirty state of sub pages
- !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- !5324  jfs: fix slab-out-of-bounds Read in dtSearch
- !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
- !5436 [sync] PR-5355:  CVE-2023-52593
- !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- !5390 [sync] PR-5259:  CVE-2024-26627​
- serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
- wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
- !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
- !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
- bus: mhi: host: Add alignment check for event ring read pointer
- UBSAN: array-index-out-of-bounds in dtSplitRoot
- jfs: fix slab-out-of-bounds Read in dtSearch
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
</package>
<package pkgid="dc395d45c80730ce159b6111ee961d8da3930750bb991d6425b9229f8a43c763" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.79.0.159.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.70.0.150" date="1711972800">- !5682 [sync] PR-5266:  llc: call sock_orphan() at release time
- !5690  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- !5686 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- tomoyo: fix UAF write bug in tomoyo_write_control()
- llc: call sock_orphan() at release time
- !5433 [sync] PR-5232:  jfs: fix cve issue
- !5638 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
- !5665 [sync] PR-5580:  CVE-2023-52622
- ext4: avoid online resizing failures due to oversized flex bg
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- !5648 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
- !5416 v2  mpt3sas bugfix
- !5635 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
- !5632 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
- arm64/mpam: Fix repeated enabling in mpam_enable()
- mm/readahead: don't decrease mmap_miss when folio has workingset flags
- mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
- !5619 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
- !5610 [sync] PR-5447:  Fix CVE-2021-47094
- dm: revert partial fix for redundant bio-based IO accounting
- md/raid5: fix atomicity violation in raid5_cache_count
- mm/mlock: return EINVAL for illegal user memory range in mlock
- KVM: x86/mmu: Don't advance iterator after restart due to yielding
- KVM: x86/mmu: Factor out tdp_iter_return_to_root
- !5475  jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in dbAdjTree
- jfs: fix array-index-out-of-bounds in diNewExt
- jfs: fix uaf in jfs_evict_inode
- scsi: mpt3sas: Fix loop logic
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: Fix a memory leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
</package>
<package pkgid="83ba4dd66b37ac088d0a4bf9b62f330efdd5ae11a88538563cb87f919c9648ec" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.80.0.160.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.71.0.151" date="1712750400">- !5941  CVE-2021-46926
- !5945 [sync] PR-5861:  ksmbd: fix uaf in smb20_oplock_break_ack
- !5937 [sync] PR-5911:  CVE-2023-52484
- !5933 [sync] PR-5895:  i2c: i801: Fix block process call transactions
- !5928 [sync] PR-5863:  CVE-2024-26788
- !5909 [sync] PR-4928:  drm/bridge: sii902x: Fix probing race issue
- !5784  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- !5919 [sync] PR-5870:  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- !4909 [sync] PR-4865:  Input: powermate - fix use-after-free in powermate_config_complete
- !5904 [sync] PR-4931:  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- ksmbd: fix uaf in smb20_oplock_break_ack
- ALSA: hda: intel-sdw-acpi: harden detection of controller
- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
- iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
- !5913 [sync] PR-5811:  Fixed CVE-2021-47037
- !5872 [sync] PR-4794:  serial: imx: fix tx statemachine deadlock
- i2c: i801: Fix block process call transactions
- dmaengine: fsl-qdma: init irq after reg initialization
- !5897 [sync] PR-5808:  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5889 [sync] PR-5832:  CVE-2023-52467
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- ASoC: q6afe-clocks: fix reprobing of the driver
- ASoC: q6afe-clocks: fix warning on symbol scope
- drm/bridge: sii902x: Fix probing race issue
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- !5749  ksmbd: fix global oob in ksmbd_nl_policy
- mfd: syscon: Fix null pointer dereference in of_syscon_register()
- serial: imx: fix tx statemachine deadlock
- !5816 [sync] PR-5780:  bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5827 [sync] PR-5785:  net: qualcomm: rmnet: fix global oob in rmnet_policy
- !4800 [sync] PR-4764:  binder: signal epoll threads of self-work
- !5791  usb: hub: Guard against accesses to uninitialized BOS descriptors
- !5798 [sync] PR-5788: v2  Patches to Fix CVE-2023-52454
- !5821 [sync] PR-5789:  perf/x86/lbr: Filter vsyscall addresses
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- !5776 [sync] PR-5724:  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- !4779 [sync] PR-4772:  x86/fpu: Stop relying on userspace for info to fault in xsave buffer
- perf/x86/lbr: Filter vsyscall addresses
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
- !5765 [sync] PR-5642:  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- nvmet-tcp: Fix the H2C expected PDU len calculation
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
- ksmbd: fix global oob in ksmbd_nl_policy
- !5720 [sync] PR-5708:  ext4: dio: Put endio under
- !5705 [sync] PR-5507:  ext4: Validate inode pa before using preallocation blocks
- ext4: Optimize endio process for DIO overwrites
- iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
- iomap: pass a flags argument to iomap_dio_rw
- iomap: rename the flags variable in __iomap_dio_rw
- iomap: add IOMAP_DIO_INLINE_COMP
- iomap: use an unsigned type for IOMAP_DIO_* defines
- iomap: cleanup up iomap_dio_bio_end_io()
- ext4: Validate inode pa before using preallocation blocks
- Input: powermate - fix use-after-free in powermate_config_complete
- binder: signal epoll threads of self-work
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.72.0.152" date="1713355200">- !6181 [sync] PR-5093:  wifi: mac80211: fix potential key use-after-free
- !6217  RDMA/siw: Fix connection failure handling
- !6238 [sync] PR-6186:  Fixed CVE-2023-52504
- !6234 [sync] PR-6193:  uio_hv_generic: Fix another memory leak in error handling paths
- !6235 [sync] PR-6192:  arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- x86/alternatives: Disable KASAN in apply_alternatives()
- arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
- uio_hv_generic: Fix another memory leak in error handling paths
- !6197  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- !6189 [sync] PR-5466:  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- RDMA/siw: Fix connection failure handling
- !6114  cifs: Fix UAF in cifs_demultiplex_thread()
- tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
- !6173 [sync] PR-6137:  vfio/pci: Lock external INTx masking ops
- wifi: mac80211: fix potential key use-after-free
- !6126  fix-CVE-2021-47101-openEuler-22.03-LTS-SP1
- vfio/pci: Lock external INTx masking ops
- !6155 [sync] PR-5717: v2  fix CVE-2023-52587
- !6149 [sync] PR-6101:  vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !6142 [sync] PR-6047:  hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6132 [sync] PR-4923:  mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- !5420 [sync] PR-5317:  KVM: s390: fix setting of fpc register
- IB/ipoib: Fix mcast list locking
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- !5130 [sync] PR-5113:  fix CVE-2023-52578
- !5121 [sync] PR-5062:  team: fix null-ptr-deref when team device type is changed
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- !6118  wifi: rt2x00: restart beacon queue when hardware reset
- !6055 [sync] PR-6017:  drm/amdgpu: fix use-after-free bug
- !6120  dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
- asix: fix wrong return value in asix_check_host_enable()
- asix: fix uninit-value in asix_mdio_read()
- net: asix: fix uninit value bugs
- dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
- wifi: rt2x00: restart beacon queue when hardware reset
- cifs: Fix UAF in cifs_demultiplex_thread()
- !6078 [sync] PR-5973:  EDAC/thunderx: Fix possible out-of-bounds string access
- !6043 [sync] PR-5995:  mm/swap: fix race when skipping swapcache
- !6023 [sync] PR-5970:  fixup CVE-2024-26751
- !6035 [sync] PR-5969:  fbdev: savage: Error out if pixclock equals zero
- EDAC/thunderx: Fix possible out-of-bounds string access
- !5849  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- !6059  fs/ntfs3: fix CVE-2023-52640
- fs/ntfs3: Fix oob in ntfs_listxattr
- fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
- ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
- drm/amdgpu: fix use-after-free bug
- mm/swap: fix race when skipping swapcache
- !5988 [sync] PR-5901:  CVE-2024-26695
- !5981 [sync] PR-5812:  afs: Increase buffer size in afs_update_volume_status()
- fbdev: savage: Error out if pixclock equals zero
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- !5948 [sync] PR-5831:  fbdev: sis: Error out if pixclock equals zero
- !5959 [sync] PR-5884:  KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- !5843 [sync] PR-5348:  s390/ptrace: handle setting of fpc register correctly
- crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- !5857  dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- afs: Increase buffer size in afs_update_volume_status()
- KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
- fbdev: sis: Error out if pixclock equals zero
- dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- net: fix kabi check warning
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- net: bridge: use DEV_STATS_INC()
- net: add atomic_long_t to net_device_stats fields
- team: fix null-ptr-deref when team device type is changed</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.73.0.153" date="1713960000">- !6414 [sync] PR-5510:  bus: mhi: host: Drop chan lock before queuing buffers
- !6143 [sync] PR-6103:  riscv: Sparse-Memory/vmemmap out-of-bounds fix
- !6535 [sync] PR-5222:  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6538 [sync] PR-5273:  net/smc: fix illegal rmb_desc access in SMC-D connection dump
- !6529 [sync] PR-5468:  media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- !6298  sp1 fix deadlock in cgroup1_writeback
- !6497 [sync] PR-6407:  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- !6506 [sync] PR-5773:  patches for CVE-2023-52617
- !6502 [sync] PR-5772:  firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6518  Fix CVE-2023-52498
- media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
- PM: sleep: Fix error handling in dpm_prepare()
- PM: sleep: Fix possible deadlocks in core system-wide PM code
- PM: core: Remove unnecessary (void *) conversions
- PM: sleep: Avoid calling put_device() under dpm_list_mtx
- PM: sleep: Use dev_printk() when possible
- async: Introduce async_schedule_dev_nocall()
- async: Split async_schedule_node_domain()
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- firmware: arm_scmi: Check mailbox/SMT channel for consistency
- !6488 [sync] PR-6455:  CVE-2021-47182
- wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- !6433 [sync] PR-6312:  fix CVE-2024-24861 for 5.10
- scsi: core: Fix scsi_mode_sense() buffer length handling
- scsi: core: Reshuffle response handling in scsi_mode_sense()
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- !6411 [sync] PR-5195:  dmaengine: fix NULL pointer in channel unregistration function
- bus: mhi: host: Drop chan lock before queuing buffers
- dmaengine: fix NULL pointer in channel unregistration function
- cgroup_writeback: fix softlockup for blkcg-&gt;memcg_list
- cgroup_writeback: fix deadlock in cgroup1_writeback
- !6081  Fix CVE-2024-26764
- !5967  Fix CVE-2023-52441 and integrate the pre-patch
- riscv: Sparse-Memory/vmemmap out-of-bounds fix
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- ksmbd: fix out of bounds in init_smb2_rsp_hdr()
- ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- ksmbd: return unsupported error on smb1 mount
- ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
</package>
<package pkgid="82f535e88475f6907f6bcda146d4040ef0c7caa2494ab08f6d152190e869dbed" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.82.0.163.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.74.0.154" date="1715169600">- !6426 [sync] PR-6291:  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- !6902  bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- !6920  bpf: Fix hashtab overflow check on 32-bit arches
- !6926  firmware: arm_scmi: Harden accesses to the reset domains
- !6922  bpf: Fix stackmap overflow check on 32-bit arches
- !6864 [sync] PR-6835:  kprobes: Fix check for probe enabled in kill_kprobe()
- !6898 [sync] PR-6592:  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- firmware: arm_scmi: Harden accesses to the reset domains
- bpf: Fix stackmap overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- !6644 [sync] PR-6623:  amdkfd: use calloc instead of kzalloc to avoid integer overflow
- kprobes: Fix check for probe enabled in kill_kprobe()
- !6388 [sync] PR-6202:  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- !6628 [sync] PR-6485:  CVE-2024-26843
- !6752 [sync] PR-6677: v3  olk-5.10: bugfix for mm
- mm/madvise: fix potential pte_unmap_unlock pte error
- mm/page_alloc: always attempt to allocate at least one page during bulk allocation
- !6505  cachefiles: fix memory leak in cachefiles_add_cache()
- !6687 [sync] PR-6580:  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- !6637 [sync] PR-6561:  md: fix kmemleak of rdev-&gt;serial
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- !6598 [sync] PR-6584:  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6607 [sync] PR-6579:  media: rc: bpf attach/detach requires write permission
- !6606 [sync] PR-6568:  IB/hfi1: Fix a memleak in init_credit_return
- !6614 [sync] PR-6543:  net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6603 [sync] PR-6520:  firmware: arm_scmi: Fix double free in SMC transport cleanup path
- md: fix kmemleak of rdev-&gt;serial
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- efi: runtime: Fix potential overflow of soft-reserved region size
- !6249  ubi: Check for too small LEB size in VTBL code
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- !6449 [sync] PR-6281: v2  net/mlx5: Update error handler for UCTX and UMEM
- media: rc: bpf attach/detach requires write permission
- IB/hfi1: Fix a memleak in init_credit_return
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- !6476  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- !6575 [sync] PR-6417:  media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- cachefiles: fix memory leak in cachefiles_add_cache()
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- net/mlx5: Update error handler for UCTX and UMEM
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- ubi: Check for too small LEB size in VTBL code</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
</package>
<package pkgid="fac91b67958573242642e7d488b3d4f5ae920c19fe8279febd94a3f62426b7e5" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.83.0.164.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.75.0.155" date="1715774400">- !6039 [sync] PR-6006:  fix CVE-2024-26669
- !5882 [sync] PR-5751:  net: atlantic: Fix DMA mapping for PTP hwts ring
- !7340  netfilter: nft_limit: reject configurations that cause integer overflow
- !7253  netfilter: nf_tables: disallow timeout for anonymous sets
- netfilter: nft_limit: reject configurations that cause integer overflow
- netfilter: nf_tables: disallow timeout for anonymous sets
- !7161 [sync] PR-6809:  memcg: fix possible use-after-free in memcg_write_event_control()
- !7121 [sync] PR-7086:  media: ttpci: fix two memleaks in budget_av_attach
- !7123 [sync] PR-7080:  drm: nv04: Fix out of bounds access
- !7145 [sync] PR-7044: v2  nfs: fix UAF in direct writes
- !7155 [sync] PR-7148:  scsi: sd: Fix sd_do_mode_sense() buffer length handling
- !7179  ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- !6978  ksmbd: validate payload size in ipc response
- !7098 [sync] PR-6818:  mm: memcg: fix stale protection of reclaim target memcg
- memcg: fix possible use-after-free in memcg_write_event_control()
- scsi: sd: Fix sd_do_mode_sense() buffer length handling
- nfs: fix UAF in direct writes
- !6764 [sync] PR-6680:  cifs: fix underflow in parse_server_interfaces()
- !6766 [sync] PR-6669:  NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- drm: nv04: Fix out of bounds access
- media: ttpci: fix two memleaks in budget_av_attach
- !7102 [sync] PR-7039:  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7084 [sync] PR-7013:  media: edia: dvbdev: fix a use-after-free
- !7024 [sync] PR-6988:  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- !6213 [sync] PR-6178:  CVE-2024-26812
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- !7009 [sync] PR-6959:  mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !7064 [sync] PR-7056:  scsi: qla2xxx: Fix command flush on cable pull
- mm: memcg: fix stale protection of reclaim target memcg
- !6946 [sync] PR-6840:  CVE-2023-52650
- media: edia: dvbdev: fix a use-after-free
- scsi: qla2xxx: Fix command flush on cable pull
- !6093 [sync] PR-5921:  ext4: fix double-free of blocks due to wrong extents moved_len
- !6090 [sync] PR-5977:  btrfs: dev-replace: properly validate device names
- !6096 [sync] PR-6029:  ceph: prevent use-after-free in encode_cap_msg()
- !7029 [sync] PR-6977:  wireguard: netlink: access device through ctx instead of peer
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- wireguard: netlink: access device through ctx instead of peer
- !6986 [sync] PR-6964: v2  CVE-2024-27000
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- !6691  quota: Fix potential NULL pointer dereference
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- serial: mxs-auart: add spinlock around changing cts state
- serial: core: Provide port lock wrappers
- !6885 [sync] PR-6740:  V2 cpuset: fix race between rebuild scheduler domains and hotplug work
- !6961 [sync] PR-6861:  media: dvb-frontends: avoid stack overflow warnings with clang
- ksmbd: validate payload size in ipc response
- !6912  pstore: inode: Only d_invalidate() is needed
- !6937 [sync] PR-6826:  fat: fix uninitialized field in nostale filehandles
- !6934 [sync] PR-6838:  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- media: dvb-frontends: avoid stack overflow warnings with clang
- fat: fix uninitialized field in nostale filehandles
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- pstore: inode: Only d_invalidate() is needed
- cpuset: fix race between rebuild scheduler domains and hotplug work
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- cifs: fix underflow in parse_server_interfaces()
- quota: Fix potential NULL pointer dereference
- vfio/pci: Create persistent INTx handler
- vfio: Introduce interface to flush virqfd inject workqueue
- ceph: prevent use-after-free in encode_cap_msg()
- ext4: fix double-free of blocks due to wrong extents moved_len
- btrfs: dev-replace: properly validate device names
- net/sched: flower: Fix kabi change
- net/sched: flower: Fix chain template offload
- net: atlantic: Fix DMA mapping for PTP hwts ring</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
</package>
<package pkgid="cc978ac2c542f839fb15b0af45a943ae2e9d36f1b8ae9a8b33495bdc12ae0235" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.84.0.165.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.76.0.156" date="1716379200">- !7634  spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- !7642  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- !7724  CVE-2024-27002
- !7706  pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- !7618 [sync] PR-5930:  RDMA/srpt: Support specifying the srpt_service_guid parameter
- !6243 [sync] PR-6082:  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- !6153 [sync] PR-6020:  net/sched: act_mirred: use the backlog for mirred ingress
- !7621 [sync] PR-6259:  arp: Prevent overflow in arp_req_get().
- !7616 [sync] PR-5993:  ipv6: sr: fix possible use-after-free and null-ptr-deref
- !7613 [sync] PR-5996:  mptcp: fix double-free on socket dismantle
- !6223 [sync] PR-6074:  Fix CVE-2024-26787
- !7610 [sync] PR-6279:  Bluetooth: Avoid potential use-after-free in hci_error_reset
- !7380 [sync] PR-6085:  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- !7377 [sync] PR-6086:  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- !5984 [sync] PR-5852:  CVE-2024-26809
- !7708  bpf: Guard stack limits against 32bit overflow
- !7637  dm-crypt: don't modify the data when using authenticated encryption
- !7623 [sync] PR-6033:  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- !7696  ext4: fix corruption during on-line resize
- !7703  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- !7628 [sync] PR-5950:  RDMA/qedr: Fix qedr_create_user_qp error flow
- clk: mediatek: Do a runtime PM get on controllers during probe
- !6532 [sync] PR-6486:  devlink: fix possible use-after-free and memory leaks in devlink_init()
- !7554 [sync] PR-5530:  net: Fix CVE-2024-26641
- !7551 [sync] PR-7006:  wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7667 [sync] PR-7586:  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- bpf: Guard stack limits against 32bit overflow
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- ext4: fix corruption during on-line resize
- !7604  cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7512 [sync] PR-7408:  backport important fix for broadcom net card
- !7510 [sync] PR-7407:  nvme-fc: do not wait in vain when unloading module
- !7513 [sync] PR-7406:  drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- !7508 [sync] PR-7402:  scsi: lpfc: Fix possible file string name overflow when updating firmware
- !7507 [sync] PR-7404:  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- !7503 [sync] PR-7403:  scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- !7523 [sync] PR-7401:  nvme-core: check for too small lba shift
- !7499 [sync] PR-7396:  drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- !7493 [sync] PR-7398:  drm/amd/display: Fix memory leak in dm_sw_fini()
- !7490 [sync] PR-7399:  drm/amd/pm: fix a double-free in si_dpm_init
- !7496 [sync] PR-7397:  drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- !7590  drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7597 [sync] PR-7548:  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7564  net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- dm-crypt: don't modify the data when using authenticated encryption
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
- dm-crypt: don't modify the data when using authenticated encryption
- RDMA/qedr: Fix qedr_create_user_qp error flow
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- arp: Prevent overflow in arp_req_get().
- RDMA/srpt: Support specifying the srpt_service_guid parameter
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- mptcp: fix double-free on socket dismantle
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- !7557 [sync] PR-7520:  drm/i915/gt: Reset queue_priority_hint on parking
- drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
- !7363 [sync] PR-5491:  CVE-2024-26640
- !6553  fixup CVE-2024-26908
- !7535 v2  CVE-2024-26907
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- drm/i915/gt: Reset queue_priority_hint on parking
- ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
- ip6_tunnel: use dev_sw_netstats_rx_add()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- !7518 [sync] PR-7484:  fix CVE-2024-26661
- kernel-doc: fix struct_group_tagged() parsing
- uapi: propagate __struct_group() attributes to the container union
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
- uapi/linux/stddef.h: Add include guards
- stddef: Introduce struct_group() helper macro
- !7516 [sync] PR-7483:  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- !7355  blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- !7347  PM / devfreq: Synchronize devfreq_monitor_[start/stop
- !7357  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- !7443 [sync] PR-6037:  fix-CVE-2024-26706
- nvme-core: check for too small lba shift
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- !7486 [sync] PR-7476:  firewire: nosy: ensure user_length is taken into account when fetching packet contents
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- net/tg3: fix race condition in tg3_reset_task()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: bnxt: fix a potential use-after-free in bnxt_init_tc
- net/bnx2x: Prevent access to a freed page in page_pool
- nvme-fc: do not wait in vain when unloading module
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
- drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
- drm/amd/display: Fix memory leak in dm_sw_fini()
- drm/amd/pm: fix a double-free in si_dpm_init
- !7295  KVM: s390: vsie: fix race during shadow creation
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- !7257  netfilter: nf_tables: disallow anonymous set with timeout flag
- !7336  inet: read sk-&gt;sk_family once in inet_recv_error()
- !7329  tunnels: fix out of bounds access when building IPv6 PMTU error
- !7324  net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- !7311  btrfs: don't drop extent_map for free space inode on write error
- !7449 [sync] PR-5998:  net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- !7446 [sync] PR-6031:  nilfs2: fix potential bug in end_buffer_async_write
- !7276  llc: Drop support for ETH_P_TR_802_2.
- !7281  llc: make llc_ui_sendmsg() more robust against bonding changes
- !7457  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7263  Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- !7479 [sync] PR-7424:  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- !7343  ppp_async: limit MRU to 64K
- !5867 [sync] PR-5794:  um: time-travel: fix time corruption
- !7390 [sync] PR-5469:  wifi: iwlwifi: fix a memory corruption
- !7313  CVE-2024-26686
- !7301  nilfs2: fix data corruption in dsync block recovery for small block sizes
- !7298  powerpc/kasan: Fix addr error caused by page alignment
- !7274  binder: fix race between mmput() and do_exit()
- !7261  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- !5623 [sync] PR-5566:  tracing: Ensure visibility when inserting an element into tracing_map
- !7241  SUNRPC: Fix a suspicious RCU usage warning
- !7231 [sync] PR-5460: v2  crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- !7240  bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- !7319  mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- !7467 [sync] PR-7394: v2  scsi: sr: Do not leak information in ioctl
- scsi: sr: Do not leak information in ioctl
- !7020 [sync] PR-6855:  KVM: Always flush async #PF workqueue when vCPU is being destroyed
- !7307  iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- !7427  net: gtp: Fix Use-After-Free in gtp_dellink
- !7431 [sync] PR-3972:  arm64: make cma=0 as default for openeuler
- net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- nilfs2: fix potential bug in end_buffer_async_write
- parisc/unaligned: Fix emulate_ldw() breakage
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Fix random data corruption from exception handler
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_sth()
- parisc/unaligned: Rewrite 32-bit inline assembly of emulate_ldd()
- parisc/unaligned: Rewrite inline assembly of emulate_ldw()
- parisc: Mark ex_table entries 32-bit aligned in uaccess.h
- parisc: Fix some apparent put_user() failures
- parisc: Implement __get/put_kernel_nofault()
- parisc: Drop strnlen_user() in favour of generic version
- parisc: Switch user access functions to signal errors in r29 instead of r8
- parisc/unaligned: Rewrite inline assembly of emulate_ldh()
- parisc/unaligned: Use EFAULT fixup handler in unaligned handlers
- !7436 [sync] PR-7414:  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- arm64: make cma=0 as default for openeuler
- net: gtp: Fix Use-After-Free in gtp_dellink
- !7383 [sync] PR-6428:  net/sched: flower: Fix unable to handle page fault bug in fl_init
- !7267  block/rnbd-srv: Check for unlikely string overflow
- wifi: iwlwifi: fix a memory corruption
- net/sched: flower: Fix unable to handle page fault bug in fl_init
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- tcp: add sanity checks to rx zerocopy
- net-zerocopy: Refactor frag-is-remappable test.
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning
- PM / devfreq: Synchronize devfreq_monitor_[start/stop]
- ppp_async: limit MRU to 64K
- inet: read sk-&gt;sk_family once in inet_recv_error()
- tunnels: fix out of bounds access when building IPv6 PMTU error
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats
- fs/proc: do_task_stat: use __for_each_thread()
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat
- btrfs: don't drop extent_map for free space inode on write error
- iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- powerpc/kasan: Fix addr error caused by page alignment
- KVM: s390: vsie: fix race during shadow creation
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- binder: fix race between mmput() and do_exit()
- block/rnbd-srv: Check for unlikely string overflow
- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- netfilter: nf_tables: disallow anonymous set with timeout flag
- SUNRPC: Fix a suspicious RCU usage warning
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- x86/xen: Add some null pointer checking to smp.c
- devlink: fix possible use-after-free and memory leaks in devlink_init()
- mmc: mmci: stm32: fix DMA API overlapping mappings warning
- mmc: mmci: stm32: use a buffer for unaligned DMA requests
- net/sched: act_mirred: use the backlog for mirred ingress
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nft_set_pipapo: remove scratch_aligned pointer
- netfilter: nft_set_pipapo: add helper to release pcpu scratch area
- netfilter: nft_set_pipapo: store index in scratch maps
- um: time-travel: fix time corruption
- tracing: Ensure visibility when inserting an element into tracing_map</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
</package>
<package pkgid="15af2ecf467ca603bf4688ba2bb05021b99e7103baef0c26d7eba79fa3b827f9" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.85.0.166.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.77.0.157" date="1716984000">- !8099  Fix CVE-2023-52854
- !8045  drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- !8148  pinctrl: single: fix potential NULL dereference
- !8157 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
- !8114 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !8093 [sync] PR-7980:  Fix CVE-2021-47455
- !8117 [sync] PR-8060:  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- !7799  net-memcg: Fix scope of sockmem pressure indicators
- !8087 [sync] PR-8019:  pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8095 [sync] PR-7143:  media: usbtv: Remove useless locks in usbtv_video_free()
- !7134 [sync] PR-7092:  Squashfs: check the inode number is not the invalid value of zero
- perf/core: Bail out early if the request AUX area is out of bound
- !8132  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- pinctrl: single: fix potential NULL dereference
- !8083 [sync] PR-6808:  CVE-2024-26923
- !8003 [sync] PR-7970:  fbmon: prevent division by zero in fb_videomode_from_videomode()
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- !6875 [sync] PR-6756:  vfio/fsl-mc: Block calling interrupt handler without trigger
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- fs/ntfs3: Fixed overflow check in mi_enum_attr()
- !7879 [sync] PR-7684:  dm snapshot: fix lockup in dm_exception_table_exit
- !8072 [sync] PR-8030:  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- padata: Fix refcnt handling in padata_free_shell()
- padata: Convert from atomic_t to refcount_t on parallel_data-&gt;refcnt
- !7995  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !8041  media: vidtv: mux: Add check and kfree for kstrdup
- media: usbtv: Remove useless locks in usbtv_video_free()
- ptp: fix code indentation issues
- ptp: Fix possible memory leak in ptp_clock_register()
- !7962  hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- !8020  media: bttv: fix use after free error due to btv-&gt;timeout timer
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
- af_unix: Fix garbage collector racing against connect()
- !8026 [sync] PR-7961:  net: atlantic: eliminate double free in error handling logic
- !7945  crypto: engine - fix crypto_queue backlog handling
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- !8034  clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- media: vidtv: mux: Add check and kfree for kstrdup
- clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- !8005 [sync] PR-7903:  virtio_ring : keep used_wrap_counter in
- net: atlantic: eliminate double free in error handling logic
- media: bttv: fix use after free error due to btv-&gt;timeout timer
- virtio_ring : keep used_wrap_counter in vq-&gt;last_used_idx
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- !7954  media: vidtv: psi: Add check for kstrdup
- !7973 [sync] PR-7949:  drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- !7968 [sync] PR-7943: v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7939 v2  pstore/platform: Add check for kstrdup
- drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- !7936 [sync] PR-7911:  ACPI: LPIT: Avoid u32 multiplication overflow
- !7850 [sync] PR-7576:  f2fs: compress: fix reserve_cblocks counting error when out of space
- !7862 [sync] PR-7757:  Fix CVE-2023-52656
- hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- media: vidtv: psi: Add check for kstrdup
- crypto: engine - fix crypto_queue backlog handling
- !7914 [sync] PR-7853:  net/mlx5e: fix a double-free in arfs_create_groups
- pstore/platform: Add check for kstrdup
- ACPI: LPIT: Avoid u32 multiplication overflow
- !7787 [sync] PR-7655: v3  KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7906 [sync] PR-7877: v4  eeprom: at24: fix memory corruption race condition
- net/mlx5e: fix a double-free in arfs_create_groups
- !7897  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- eeprom: at24: fix memory corruption race condition
- !7796 [sync] PR-7743:  netrom: Fix data-races around sysctl_net_busy_read
- !7884 [sync] PR-7773:  Fix CVE-2023-52698
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- net: netlabel: Fix kerneldoc warnings
- dm snapshot: fix lockup in dm_exception_table_exit
- !7859 [sync] PR-7846:  netrom: Fix a data-race around sysctl_netrom_transport_timeout
- io_uring: drop any code related to SCM_RIGHTS
- io_uring/unix: drop usage of io_uring socket
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- !7778 [sync] PR-7749: v2  wifi: iwlwifi: dbg-tlv: ensure NUL termination
- f2fs: compress: fix reserve_cblocks counting error when out of space
- !7829 [sync] PR-7779:  LoongArch: Define the __io_aw() hook as mmiowb()
- !7826 [sync] PR-7714:  CVE-2024-35936
- !7837 [sync] PR-7681:  xfs: three bug fix recently
- xfs: update dir3 leaf block metadata after swap
- xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
- iomap: fix warning in xfs_iomap_write_delalloc_release()
- !7747  x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- !7819 [sync] PR-7734:  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- LoongArch: Define the __io_aw() hook as mmiowb()
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- net-memcg: Fix scope of sockmem pressure indicators
- netrom: Fix data-races around sysctl_net_busy_read
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()
- !7768  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- !7711 [sync] PR-7579:  powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- !7755  wifi: ath11k: decrease MHI channel buffer length to 8KB
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Merge remote-tracking branch 'upstream/openEuler-22.03-LTS-SP1' into HEAD
- Squashfs: check the inode number is not the invalid value of zero
- vfio/fsl-mc: Block calling interrupt handler without trigger</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
</package>
<package pkgid="bba20cff00aadeb8508b4ea0a5bbd4fac6f5c6812d23886e2846a549149746ca" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.86.0.167.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.78.0.158" date="1717588800">- !8594 [sync] PR-6990:  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- !8591 [sync] PR-7174:  CVE-2022-48689
- !8595 [sync] PR-6939:  USB: core: Fix deadlock in usb_deauthorize_interface()
- !8554 [sync] PR-8395:  5.10: fix CVE-2024-35978
- !8364  perf: hisi: Fix use-after-free when register pmu fails
- !8606  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- !7672  btrfs: send: handle path ref underflow in header iterate_inode_ref()
- !8597 [sync] PR-6393:  crypto: xilinx - call finalize with bh disabled
- !8514  net: ena: Fix incorrect descriptor free behavior
- !8563 [sync] PR-8110:  drm/client: Fully protect modes[
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- crypto: xilinx - call finalize with bh disabled
- USB: core: Fix deadlock in usb_deauthorize_interface()
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tcp: TX zerocopy should not sense pfmemalloc status
- net: skbuff: update comment about pfmemalloc propagating
- net: introduce __skb_fill_page_desc_noacc
- tcp: factor out tcp_build_frag()
- !8505  CVE: CVE-2024-36015
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex
- !8523  tty: vcc: Add check for kstrdup() in vcc_probe()
- !8487 [sync] PR-8397:  mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- !8486 [sync] PR-8373:  dma-direct: Leak pages on dma_set_decrypted() failure
- !8245 [sync] PR-7870:  CVE-2024-35995
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- !8202  arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- !8408  pinctrl: core: delete incorrect free in pinctrl_enable()
- tty: vcc: Add check for kstrdup() in vcc_probe()
- net: ena: Fix incorrect descriptor free behavior
- !8457 [sync] PR-8416:  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- !8501 [sync] PR-7889:  vt: fix unicode buffer corruption when deleting characters
- ppdev: Add an error check in register_device
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- vt: fix unicode buffer corruption when deleting characters
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- dma-direct: Leak pages on dma_set_decrypted() failure
- !8429  drm/amdgpu: Fix even more out of bound writes from debugfs
- !8340  soc: qcom: llcc: Handle a second device without data corruption
- !8369  efi/capsule-loader: fix incorrect allocation size
- !8312 [sync] PR-8039: v2  dynamic_hugetlb: backport some bugfix
- !8451 [sync] PR-8342:  net/mlx5: Properly link new fs rules into the tree
- !8293  drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
- net/mlx5: Properly link new fs rules into the tree
- !8179  jfs: fix array-index-out-of-bounds in diAlloc
- !8167 v2  mmc: sdio: fix possible resource leaks in some error paths
- !8346 [sync] PR-8248:  gfs2: ignore negated quota changes
- !8331 [sync] PR-8254:  sysv: don't call sb_bread() with pointers_lock held
- !8375 [sync] PR-8306:  mptcp: ensure tx skbs always have the MPTCP ext
- drm/amdgpu: Fix even more out of bound writes from debugfs
- !8391 [sync] PR-8109:  vhost-vdpa: fix use after free in vhost_vdpa_probe()
- pinctrl: core: delete incorrect free in pinctrl_enable()
- !8370  locking/ww_mutex/test: Fix potential workqueue corruption
- !8311  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8334  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- !8317  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8235 [sync] PR-8054:  CVE-2023-52669
- !8380 [sync] PR-8212:  fix CVE-2024-35877
- vhost-vdpa: fix use after free in vhost_vdpa_probe()
- !8294  CVE-2023-52735
- x86/mm/pat: fix VM_PAT handling in COW mappings
- !8196  clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- mptcp: ensure tx skbs always have the MPTCP ext
- locking/ww_mutex/test: Fix potential workqueue corruption
- efi/capsule-loader: fix incorrect allocation size
- perf: hisi: Fix use-after-free when register pmu fails
- !7776 [sync] PR-7717:  CVE-2023-52655
- !8323 [sync] PR-8219:  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8273  ALSA: hda: Do not unset preset when cleaning up codec
- !8269  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- !8251 v2  CVE-2024-35956
- gfs2: ignore negated quota changes
- soc: qcom: llcc: Handle a second device without data corruption
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- sysv: don't call sb_bread() with pointers_lock held
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- !8277  usb: udc: remove warning when queue disabled ep
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- !8289 [sync] PR-8150:  mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !8265 [sync] PR-8228:  ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- mm/dynamic_hugetlb: refine error info in the destruction
- mm/dynamic_hugetlb: make free_huge_page_to_dhugetlb_pool irq safe
- mm/dynamic_hugetlb: check NULL pointer for early parameter
- mm/dynamic_hugetlb: add lru_add_drain_all() before migration
- mm/dynamic_hugetlb: add cond_resched() in hpool_merge_page()
- mm/dynamic_hugetlb: reduce the number of migration attempts
- mm/dpool: Use helper function to lock/unlock
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- !8231  CVE-2023-52804
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
- !7833 [sync] PR-7599:  irqchip/gic-v3-its: Prevent double free on error
- !8259 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- usb: udc: remove warning when queue disabled ep
- ALSA: hda: Do not unset preset when cleaning up codec
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- !7855  clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: fix anon_dev leak in create_subvol()
- ACPI: CPPC: Fix access width used for PCC registers
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix up I/O port access in cpc_read()
- ACPI: CPPC: Implement support for SystemIO registers
- crypto: s390/aes - Fix buffer overread in CTR mode
- fs/jfs: Add validity check for db_maxag and db_agpref
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- !8224  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- !8125 [sync] PR-8042:  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- jfs: fix array-index-out-of-bounds in diAlloc
- mmc: sdio: fix possible resource leaks in some error paths
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- irqchip/gic-v3-its: Prevent double free on error
- usb: aqc111: check packet for fixup for true limit
- btrfs: send: handle path ref underflow in header iterate_inode_ref()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
</package>
<package pkgid="4e568367478d72e14133a72613681bdfb71f93f1242993950f929e65475c229f" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.87.0.168.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.79.0.159" date="1718193600">- !8950  aio: fix mremap after fork null-deref
- !8948  CVE-2022-48652
- !8866  ipv6: prevent NULL dereference in ip6_output()
- !8780  smb: client: fix UAF in smb2_reconnect_server()
- !8859  net/smc: avoid data corruption caused by decline
- !8722 v2  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !8964  Fix CVE-2024-35915
- !8963  Fix CVE-2024-35915
- !8735  mptcp: ensure snd_nxt is properly initialized on connect
- !8761  tipc: fix UAF in error path
- !8741  octeontx2-af: avoid off-by-one read from userspace
- !8953  powerpc/powernv: Add a null pointer check in opal_event_init()
- !8685  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8967  Fix CVE-2024-36949
- !8861  blk-iocost: do not WARN if iocg was already offlined
- !8841 v2  IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- !8945  usb: typec: ucsi: Limit read size on v1.2
- !8905  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8709 [sync] PR-8046:  block: prevent division by zero in blk_rq_stat_sum()
- !8839  blk-iocost: avoid out of bounds shift
- !8857  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8911  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8915  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- !8788 [sync] PR-8558:  xen-netfront: Add missing skb_mark_for_recycle
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- powerpc/powernv: Add a null pointer check in opal_event_init()
- aio: fix mremap after fork null-deref
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8880  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- usb: typec: ucsi: Limit read size on v1.2
- !8892  net: fix out-of-bounds access in ops_init
- !8810  net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8672  fix CVE-2024-36021 and CVE-2024-36900
- !8886  CVE-2024-36933
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8755  drm/amd/display: Avoid NULL dereference of timing generator
- !8754  pwm: Fix double shift bug
- !8850  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8665  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- net/smc: avoid data corruption caused by decline
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8687  tcp: properly terminate timers for kernel sockets
- !8630  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- blk-iocost: avoid out of bounds shift
- !7988 [sync] PR-7960:  ipv6: Fix infinite recursion in fib6_dump_done().
- !8388 [sync] PR-8300:  ipvlan: add ipvlan_route_v6_outbound() helper
- !8282 [sync] PR-8133:  fix CVE-2021-47265
- !7925 [sync] PR-7741:  ipv4: check for NULL idev in ip_route_use_hint()
- !8724  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8480  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- !8622  fs/9p: only translate RWX permissions for plain 9P2000
- net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- !8728  net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8790  Bluetooth: SCO: Fix not validating setsockopt user input
- !8680  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- !8713 [sync] PR-8583:  mmc: sdhci-msm: pervent access to suspended controller
- !8670  CVE-2024-35854
- Bluetooth: SCO: Fix not validating setsockopt user input
- !8696  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- !8653 v3  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- xen-netfront: Add missing skb_mark_for_recycle
- !8571  jfs: fix two array-index-out-of-bounds issuse
- !8356  nilfs2: fix underflow in second superblock position calculations
- !8592  geneve: fix header validation in geneve[6
- !8531  gpiolib: cdev: fix uninitialised kfifo
- smb: client: fix UAF in smb2_reconnect_server()
- !8631 [sync] PR-8519:  mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- tipc: fix UAF in error path
- !8751  ubifs: Check @c-&gt;dirty_[n|p
- drm/amd/display: Avoid NULL dereference of timing generator
- pwm: Fix double shift bug
- !8633 [sync] PR-8425:  CVE-2023-52677
- ubifs: Check @c-&gt;dirty_[n|p]n_cnt and @c-&gt;nroot state under @c-&gt;lp_mutex
- octeontx2-af: avoid off-by-one read from userspace
- !8669  wifi: ath11k: fix dfs radar event locking
- !8619  CVE-2024-35896
- !8608  CVE-2024-35895
- mptcp: ensure snd_nxt is properly initialized on connect
- !8659  wifi: ath11k: fix htt pktlog locking
- !8587  fix CVE-2021-47558
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- !8569  fix CVE-2024-36906
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- !7933  bpf: Protect against int overflow for stack access size
- !8627 [sync] PR-8561:  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- !8625 [sync] PR-8497:  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- mmc: sdhci-msm: pervent access to suspended controller
- !8572  xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- block: prevent division by zero in blk_rq_stat_sum()
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- tcp: properly terminate timers for kernel sockets
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- net: hns3: fix kernel crash when devlink reload during initialization
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: fix kernel crash when devlink reload during vf initialization
- net: hns3: fix kernel crash when devlink reload during pf initialization
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- wifi: ath11k: fix dfs radar event locking
- phonet/pep: fix racy skb_queue_empty() use
- wifi: ath11k: fix htt pktlog locking
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- !8537  scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- !8538  drm/amdgpu: Fix potential null pointer derefernce
- !8540  s390/dasd: protect device queue against concurrent access
- !8462  i2c: smbus: fix NULL function pointer dereference
- !8432  platform/x86: wmi: Fix opening of char device
- riscv: Check if the code to patch lies in the exit section
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: complete validation of user input
- netfilter: validate user input for expected length
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- geneve: fix header validation in geneve[6]_xmit_skb
- net: stmmac: Disable Tx queues when reconfiguring the interface
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- ARM: 9381/1: kasan: clear stale stack poison
- s390/dasd: protect device queue against concurrent access
- drm/amdgpu: Fix potential null pointer derefernce
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- gpiolib: cdev: fix uninitialised kfifo
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- i2c: smbus: fix NULL function pointer dereference
- platform/x86: wmi: Fix opening of char device
- ipvlan: add ipvlan_route_v6_outbound() helper
- nilfs2: fix underflow in second superblock position calculations
- RDMA: Verify port when creating flow rule
- IB/mlx4: Use port iterator and validation APIs
- ipv6: Fix infinite recursion in fib6_dump_done().
- bpf: Protect against int overflow for stack access size
- ipv4: check for NULL idev in ip_route_use_hint()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
</package>
<package pkgid="72de4577009d421b9c9980c3e41cbcb28969738a9c94df858bfb66addce18f06" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.88.0.169.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.80.0.160" date="1718798400">- !9093 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9031  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9065  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8933  Fix CVE-2023-52732
- !8927 [sync] PR-8222:  Fix CVE-2023-52672
- !9172 [sync] PR-7041:  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- !9171 [sync] PR-6994: v2  net/mlx5e: Prevent deadlock while disabling aRFS
- !8733  batman-adv: Avoid infinite loop trying to resize local TT
- !7374 [sync] PR-6879:  net/smc: Fix possible access to freed memory in link clear
- !9098  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- net/mlx5e: Prevent deadlock while disabling aRFS
- !9165  genirq: introduce handle_fasteoi_edge_irq flow handler
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !9139 v2  CVE-2024-36971
- !8495  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9127  hsr: Prevent use after free in prp_create_tagged_frame()
- !9075  Fix UAF problem of hpool
- !9132  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9130  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9069  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8970  mmc: mmc_spi: fix error handling in mmc_spi_probe()
- !8977 [sync] PR-8584:  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8701  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- net: annotate data-races around sk-&gt;sk_dst_pending_confirm
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- hsr: Prevent use after free in prp_create_tagged_frame()
- !9002  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !9056  drm/panel: fix a possible null pointer dereference
- !9054  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !8939  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- !8952  ACPI: video: check for error while searching for backlight device parent
- !8986 [sync] PR-8639:  s390/qeth: Fix kernel panic after setting hsuid
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8714  Fix page corruption caused by racy check in __free_pages
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9080  Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- !9072 [sync] PR-9015:  CVE-2024-36953
- !9071 [sync] PR-9014:  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !8947 [sync] PR-6800:  block: fix overflow in blk_ioctl_discard()
- !9052  CVE-2024-35796
- drm/panel: fix a possible null pointer dereference
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9021  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !9048  IB/hfi1: Restore allocated resources on failed copyout
- IB/hfi1: Restore allocated resources on failed copyout
- !9028  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8830  Fix CVE-2024-35951
- !9009  fix CVE-2024-35839
- !9008  tipc: fix a possible memleak in tipc_buf_append
- !8721  CVE-2024-35887
- !8876  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8884  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8922  hugetlbfs: fix hugetlbfs_statfs() locking
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- netfilter: bridge: replace physindev with physinif in nf_bridge_info
- netfilter: propagate net to nf_bridge_get_physindev
- netfilter: nfnetlink_log: use proper helper for fetching physinif
- !8662  usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- tipc: fix a possible memleak in tipc_buf_append
- !8617 [sync] PR-8472:  fix CVE-2024-27415
- !8983  fix CVE-2024-36905
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- s390/qeth: Fix kernel panic after setting hsuid
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ACPI: video: check for error while searching for backlight device parent
- block: fix overflow in blk_ioctl_discard()
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- ceph: blocklist the kclient when receiving corrupted snap trace
- ceph: shut down access to inode when async create fails
- ceph: refactor remove_session_caps_cb
- ceph: fix auth cap handling logic in remove_session_caps_cb
- ceph: drop private list from remove_session_caps_cb
- pipe: wakeup wr_wait after setting max_usage
- fs/pipe: move check to pipe_has_watch_queue()
- hugetlbfs: fix hugetlbfs_statfs() locking
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- batman-adv: Avoid infinite loop trying to resize local TT
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- Fix page corruption caused by racy check in __free_pages
- wifi: cfg80211: check A-MSDU format more carefully
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: bridge: confirm multicast packets before passing them up the stack
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- net/smc: Fix possible access to freed memory in link clear</changelog>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="37c0cbc6ee9369acd0f6d4514132f0e0698a02067fd8dc2b6feda0d27ca963ec" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.89.0.170.oe2203sp1"/>
  <changelog author="luhuaxin &lt;luhuxin1@huawei.com&gt; - 5.10.0-136.80.0.161" date="1718884800">- Add the pub key in openEuler RPM-PGP certificate</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
</package>
<package pkgid="a4cd93d2974ad648943868cf79633b1b84dc93745f8c85ed0287a7655728a0d2" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.90.0.171.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.81.0.162" date="1719403200">- !8104 [sync] PR-7886:  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- !9443  net/mlx5: Discard command completions in internal error
- !9448  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9432  hid: cp2112: Fix duplicate workqueue initialization
- !9424  ASoC: SOF: Fix DSP oops stack dump output contents
- !9418 [sync] PR-6683: v2  CVE-2024-26921
- !9296  CVE-2021-47599
- !9403  Fix CVE-2024-31076
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- !9198  init/main.c: Fix potential static_command_line memory overflow
- hid: cp2112: Fix duplicate workqueue initialization
- ASoC: SOF: Fix DSP oops stack dump output contents
- !6742 [sync] PR-6654:  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- sk_buff: Fix KABI break for the modification of struct sk_buff
- inet: inet_defrag: prevent sk release while still in use
- net: Fix KABI break for introducing is_skb_wmem()
- skb_expand_head() adjust skb-&gt;truesize incorrectly
- skbuff: introduce skb_expand_head()
- !9349  powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9396  RDMA/hns: Fix deadlock on SRQ async events.
- !9353 [sync] PR-9305:  CVE-2024-26661 following bugfix
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- !9359  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9379  RDMA/hns: Fix UAF for cq async event
- !9291  net: bridge: xmit: make sure we have at least eth header len bytes
- RDMA/hns: Fix deadlock on SRQ async events.
- !9049 [sync] PR-8774:  CVE-2024-36914
- !9263  ring-buffer: Fix a race between readers and resize checks
- RDMA/hns: Fix UAF for cq async event
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- !9272  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9274  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- !9281  drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9279  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- !9213 [sync] PR-9112:  Backport some optimizing patches for kunpeng920
- !9106  ksmbd: no response from compound read
- !9185  spi: Fix deadlock when adding SPI controllers on SPI buses
- net: bridge: xmit: make sure we have at least eth header len bytes
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- ring-buffer: Fix a race between readers and resize checks
- !9181  wifi: wilc1000: fix RCU usage in connect path
- !9214  drm/amd/display: Fix division by zero in setup_dsc_config
- !7541 [sync] PR-6801:  block: fix discard
- !9142 v2  CVE-2023-52810
- !8460 [sync] PR-8069:  CVE-2021-47427
- !9155  fix CVE-2023-52791
- !9169  UBIFS: fixes a series of issues that caused by power cut
- !9003  media: tc358743: register v4l2 async device only after successful setup
- !9088  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- init/main.c: Fix potential static_command_line memory overflow
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- i2c: core: Fix atomic xfer check for non-preempt config
- i2c: core: Run atomic i2c xfer when !preemptible
- fs/jfs: Add check for negative db_l2nbperpage
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Skip on writeback when it's not applicable
- media: tc358743: register v4l2 async device only after successful setup
- scsi: iscsi: Fix iscsi_task use after free
- scsi: iscsi: Have abort handler get ref to conn
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- block: check io size before submit discard
- block: fix overflow in blk_ioctl_discard()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403201">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
</package>
<package pkgid="267228984be592f72c5524be14f886c99944af59d3b891cfcd2d2705e5b01736" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.91.0.172.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.82.0.163" date="1719403200">- !9461 [sync] PR-5860:  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9197  scsi: core: Fix unremoved procfs host directory regression
- !9203  dyndbg: fix old BUG_ON in &gt;control parser
- !9195  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9200  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9189  clk: Fix clk_core_get NULL dereference
- !9187  net: phy: fix phy_get_internal_delay accessing an empty array
- !9460 v2  CVE-2024-27032
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- scsi: core: Fix unremoved procfs host directory regression
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
</package>
<package pkgid="dbe92011bcda21e6cbbfef0657fdd94e43e78ea16142ea96d7e8b4c8756fdfbf" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.92.0.173.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.83.0.164" date="1720008000">- !9159  xfs: don't use current-&gt;journal_info
- !9659  fix uaf when proc_cpuset_show
- !9574 [sync] PR-8683: v4  Fix CVE-2024-35879
- !9531  CVE-2024-37356
- !9650  RDMA/hns: Modify the print level of CQE error
- !9495  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- RDMA/hns: Modify the print level of CQE error
- !9515  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9604 [sync] PR-9595:  drm/arm/malidp: fix a possible null pointer dereference
- !9603 [sync] PR-9593:  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9602 [sync] PR-9504:  um: Add winch to winch_handlers before registering winch IRQ
- !9601  CVE-2024-38597
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- um: Add winch to winch_handlers before registering winch IRQ
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9575 [sync] PR-9321:  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9586 [sync] PR-9284:  of: module: add buffer overflow check in of_modalias()
- !9589  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- of: module: add buffer overflow check in of_modalias()
- !9541  net/mlx5e: Avoid field-overflowing memcpy()
- !9480  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9579 [sync] PR-9558:  CVE-2024-39362
- !8565 [sync] PR-8240: v2  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- !9545  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9576 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9384  serial: max3100: Update uart_driver_registered on driver removal
- !9564  fs/ntfs3: Check 'folio' pointer for NULL
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- drm/amd/display: Fix potential index out of bounds in color transformation function
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()
- !9484  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9529  media: lgdt3306a: Add a check against null-pointer-def
- fs/ntfs3: Check 'folio' pointer for NULL
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- !9375  ALSA: core: Fix NULL module pointer assignment at card init
- !9468  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9458  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- !9431  CVE-2022-48703
- !9364  fs/ntfs3: Use variable length array instead of fixed size
- media: lgdt3306a: Add a check against null-pointer-def
- !9411  kprobes: Fix possible use-after-free issue on kprobe registration
- !8743  ext4 bugfix from mainline
- !9498  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9397 [sync] PR-9350:  tracing: Fix permissions for the buffer_percent file
- !9334  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8712  ubifs: Set page uptodate in the correct place
- !9259  Fix CVE-2024-38588
- !9385  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9454  jffs2: prevent xattr node from overflowing the eraseblock
- !9328  CVE-2024-38596
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- kprobes: Fix possible use-after-free issue on kprobe registration
- tracing: Fix permissions for the buffer_percent file
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- af_unix: Fix data-races around sk-&gt;sk_shutdown.
- af_unix: Fix data races around sk-&gt;sk_shutdown.
- ftrace: Fix possible use-after-free issue in ftrace_location()
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
- ftrace: Store the order of pages allocated in ftrace_page
- xfs: don't use current-&gt;journal_info
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- ubifs: Set page uptodate in the correct place
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="4815c84381867ab91b30c630b6f1f7bb657b9a90121b6be00426382771483cc1" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.93.0.174.oe2203sp1"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-136.84.0.165" date="1720612800">- !9852  net/sched: act_skbmod: prevent kernel-infoleak
- !9854  nilfs2: fix use-after-free of timer for log writer thread
- !9855 [sync] PR-8096:  Fix CVE-2024-35988
- !9469 [sync] PR-8098:  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !9833  mmc: davinci: Don't strip remove function when driver is builtin
- !9847 [sync] PR-9500:  netfilter: nf_tables: flush pending destroy work before exit_net release
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- netfilter: nf_tables: flush pending destroy work before exit_net release
- mmc: davinci: Don't strip remove function when driver is builtin
- !9651  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9818  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9806  CVE-2024-36478
- !9773  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- null_blk: Move driver into its own directory
- !9794  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9790  clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- !9661 v3  Fix CVE-2024-38567
- !9552  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9767  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9769  iomap: Don't finish dio under irq when there exists pages
- !9774  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- !9733  drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9718  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9762  CVE-2024-26816
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9717  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- !9702  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9738  CVE-2024-38621
- !9673  ax25: Fix reference count leak issue of net_device
- !9734  net/9p: fix uninit-value in p9_client_rpc()
- !9740  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9739  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- media: stk1160: fix bounds checking in stk1160_copy_video()
- net/9p: fix uninit-value in p9_client_rpc()
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- !9722  ext4: delete redundant uptodate
- ext4: delete redundant uptodate check for buffer
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9641  CVE-2024-38582
- !9663  tls: fix missing memory barrier in tls_init
- !9656 v2  CVE-2024-38586
- !9685  greybus: lights: check return of get_channel_from_mode
- !9671  crypto: bcm - Fix pointer arithmetic
- !9635  fix CVE-2022-48721
- greybus: lights: check return of get_channel_from_mode
- ax25: Fix reference count leak issue of net_device
- crypto: bcm - Fix pointer arithmetic
- tls: fix missing memory barrier in tls_init
- wifi: carl9170: add a proper sanity check for endpoints
- USB: core: Add routines for endpoint checks in old drivers
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- net/smc: Fix slab-out-of-bounds issue in fallback
- net/smc: Only save the original clcsock callback functions
- net/smc: Avoid overwriting the copies of clcsock callback functions
- net/smc: Forward wakeup to smc socket waitqueue after fallback
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
</package>
<package pkgid="a97ed9ad506d591790163ca94966d4f96ab1160b03ebf2ec44bfdca119a28bf1" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.94.0.175.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.85.0.166" date="1721217600">- !10068 [sync] PR-9984:  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !10032  ipv6: prevent possible NULL dereference in rt6_probe()
- !10063  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9991  netpoll: Fix race condition in netpoll_owner_active
- !10043  lib/generic-radix-tree.c: Don't overflow in peek()
- !9951  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9981  CVE-2024-40972
- !9995  Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- !9846 v2  CVE-2024-38598
- !9907  sock_map: avoid race between sock_map_close and sk_psock_put
- !9927  ocfs2: fix races between hole punching and AIO+DIO
- !9912  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9947  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9969 v2  netfilter: nft_set_pipapo: do not free live element
- !9980  Fix CVE-2023-52781
- !9954  drm/komeda: check for error-valued pointer
- !9923  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- Bluetooth: btusb: Add date-&gt;evt_skb is NULL check
- netpoll: Fix race condition in netpoll_owner_active
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- USB: core: Change configuration warnings to notices
- netfilter: nft_set_pipapo: do not free live element
- !9869  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9906  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9894  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9828  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9826  smb: client: fix potential deadlock when releasing mids
- !9890  ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9822 [sync] PR-9712:  fix CVE-2024-38540
- !9823 [sync] PR-9711:  fix CVE-2024-38615
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9840  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9873  CVE-2024-38570
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9636  ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- !9747  CVE-2024-39469
- !9844  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
</package>
<package pkgid="9bf56b3835e140bc5a79c91404e456803194cb18c2bf6c4b14de98242774ac66" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.95.0.176.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.86.0.167" date="1721822400">- !10283 v2  CVE-2022-48816
- !9781  ksmbd: fix wrong DataOffset validation of create context
- !10301 v2  usb-storage: alauda: Check whether the media is initialized
- !10297  CVE-2023-52679
- usb-storage: alauda: Check whether the media is initialized
- !10263  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- of: unittest: Fix compile in the non-dynamic case
- of: unittest: Fix of_count_phandle_with_args() expected value message
- of: Fix double free in of_parse_phandle_with_args_map
- !10225  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10244  Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10230  ima: Fix use-after-free on a dentry's dname.name
- !10235  ima: Avoid blocking in RCU read-side critical section
- !10234  fix CVE-2024-41007
- !10201  net: dsa: seville: register the mdiobus under devres
- !10267  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !10256  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !9918  powerpc/pseries: Enforce hcall result buffer validity and size
- !10223  CVE-2024-35931
- !10085  nfs: Ensure that the NFS client returns a correct writeback error code
- ima: Avoid blocking in RCU read-side critical section
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- !10181 [sync] PR-9836:  fpga: manager: add owner module and take its refcount
- !10221  bpf: Fix overrunning reservations in ringbuf
- ima: Fix use-after-free on a dentry's dname.name
- !10200  dma-mapping: benchmark: fix node id validation
- !10209  drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10020  drm/exynos/vidi: fix memory leak in .get_modes()
- scsi: ufs: Fix a deadlock in the error handler
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- bpf: Fix overrunning reservations in ringbuf
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- !10136  ALSA: timer: Set lower bound of start tick time
- !10105  ecryptfs: Fix buffer size for tag 66 packet
- net: dsa: seville: register the mdiobus under devres
- dma-mapping: benchmark: fix node id validation
- !10140 [sync] PR-10095:  CVE-2024-40968
- !10108  tracing: Build event generation tests only as modules
- !10157 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10008  xfs: fix mount hung while sb recover fail
- fpga: manager: add owner module and take its refcount
- !10164  drop_monitor: replace spin_lock by raw_spin_lock
- !10163  RDMA/mlx5: Add check for srq max_sge attribute
- !10049  tipc: force a dst refcount before doing decryption
- !10023  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !10042  Fix CVE-2024-36939
- MIPS: Octeon: Add PCIe link status check
- !10129  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10119  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10080  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10053  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10089  fix CVE-2024-40995
- !9993  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9902  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10098 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9932  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- ksmbd: fix wrong DataOffset validation of create context</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
</package>
<package pkgid="b1ceafbf117d40ff4fced6daac3a71295378d8ce4dfb7ae36978dbf0cc5e8a9d" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.96.0.177.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.87.0.168" date="1722427200">- !10435  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !8942 [sync] PR-8468: v2  CVE-2024-35808
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- !10067  iommu: Return right value in iommu_sva_bind_device()
- !10335  fix CVE-2024-36479 for sp1
- !10365  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10213  net: mvpp2: clear BM pool before initialization
- !10212  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- !10396  BMA: Fix DMA reset problem and change the version number
- !10343  fix CVE-2024-27010
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !10367 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10322  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- net/sched: initialize noop_qdisc owner
- net/sched: fix kabi change in struct Qdisc
- net/sched: Fix mirred deadlock on device recursion
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- !9369  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10072  serial: imx: Introduce timeout when waiting on transmitter empty
- !9975  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10314 [sync] PR-10187:  fix CVE-2021-47205
- !10313 [sync] PR-10189:  fix CVE-2024-40915
- !10252  fbdev: savage: Handle err return when savagefb_check_var failed
- !10308  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10259  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- fbdev: savage: Handle err return when savagefb_check_var failed
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
- md/dm-raid: don't call md_reap_sync_thread() directly</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
</package>
<package pkgid="1aa28a68269831f17ede0d0f940d6f93c1b85d6c757b597bc871d6525b148bed" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.97.0.178.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.88.0.169" date="1723032000">- !10769  CVE-2024-41027
- !10667 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10724  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10738  net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10744  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10758  Fix CVE-2024-42160
- !10531  ftruncate: pass a signed offset
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10581 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10718  CVE-2024-42101
- !10712  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10728  net/iucv: Avoid explicit cpumask var allocation on stack
- !10696 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10719  gve: Account for stopped queues when reading NIC stats
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10620  fix CVE-2024-42129
- !9680  drm: vc4: Fix possible null pointer dereference
- !10671 [sync] PR-10598:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- gve: Account for stopped queues when reading NIC stats
- !10588 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- nvmet: always initialize cqe.result
- !10682  ocfs2: fix DIO failure due to insufficient transaction credits
- !10567  gpio: davinci: Validate the obtained number of IRQs
- !10669  fix CVE-2024-42076
- !10662  fix CVE-2024-41062
- !10651  xfs: don't walk off the end of a directory data block
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10655  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10632  sched/deadline: Fix task_struct reference leak
- !10520  xfs: add bounds checking to xlog_recover_process_data
- ocfs2: fix DIO failure due to insufficient transaction credits
- !10390  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: can: j1939: Initialize unused data in j1939_send_one()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10638  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10645  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10637  RDMA/restrack: Fix potential invalid address access
- !10647  net: dsa: mv88e6xxx: Correct check for empty list
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10619  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10558  CVE-2024-42105
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10602  ppp: reject claimed-as-LCP but actually malformed packets
- !10611  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10604  IB/core: Implement a limit on UMAD receive List
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- s390/pkey: Wipe copies of protected- and secure-keys
- !10553  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10537  CVE-2024-42082
- !10595  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10570  ila: block BH in ila_output()
- !10563  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10587  filelock: Fix fcntl/close race recovery compat path
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10542  tap: add missing verification for short frame
- !10535  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10550  backport serveral bugfixes from upstream
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10549  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10528  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10421  stm class: Fix a double free in stm_register_device()
- !10478  ALSA: emux: improve patch ioctl data validation
- !10247  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10543  tun: add missing verification for short frame
- !10469 [sync] PR-10342:  CVE-2024-39471
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10464  null_blk: fix validation of block size
- bpf, events: Use prog to emit ksymbol event for main program
- bpf, perf: Use subprog name when reporting subprog ksymbol
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: ensure main program has an extable
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10477  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10468  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10455  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- xfs: add bounds checking to xlog_recover_process_data
- !10461  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10494  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10488  fix CVE-2024-42086
- !9937  media: gspca: cpia1: shift-out-of-bounds in set_flicker
- !9930  ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- !9934  selinux: avoid dereference of garbage after mount failure
- !10379  drm/radeon: fix UBSAN warning in kv_dpm.c
- !10423  kunit: Fix kthread reference
- !10422  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10362  PCI/ROM: Fix PCI ROM header check bug
- !10459  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10405  Fix CVE-2024-41069
- ALSA: emux: improve patch ioctl data validation
- jffs2: Fix potential illegal address access in jffs2_free_inode
- !10353  fix CVE-2024-40976
- !10272  HID: core: remove unnecessary WARN_ON() in implement()
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- !10430  s390/qeth: fix deadlock during failing recovery
- !10441  net/sched: Fix UAF when resolving a clash
- !10447  net: ena: Add validation for completion descriptors consistency
- !10426  net: stmmac: move the EST lock to struct stmmac_priv
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- HID: core: remove unnecessary WARN_ON() in implement()
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- selinux: avoid dereference of garbage after mount failure
- ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
</package>
<package pkgid="0c1397a8b51fe349c9b614b0877147c1b155dac4568b9ed7ff7f12848ffdb7b6" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.98.0.179.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.89.0.170" date="1723636800">- !10881  orangefs: fix out-of-bounds fsid access
- !10880  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10879  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10884  crypto: aead,cipher - zeroize key buffer after use
- !10889  s390/pkey: Wipe copies of clear-key structures on failure
- !10822  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10844  netfilter: nf_tables: prefer nft_chain_validate
- !10868 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10874  USB: serial: mos7840: fix crash on resume
- s390/pkey: Wipe copies of clear-key structures on failure
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10829  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10867 [sync] PR-10817:  media: dvb-frontends: tda10048: Fix integer overflow
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- media: dvb-frontends: tda10048: Fix integer overflow
- !10864 v3  ext4: flexibly control whether to enable dioread_nolock by default
- !10850  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10617  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10830  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10828  fix CVE-2024-42095
- !10705  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10837  wifi: mt76: replace skb_put with skb_put_zero
- !10840  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- !10815  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10811  tcp_metrics: validate source addr length
- !10809  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10751  btrfs: qgroup: fix quota root leak after quota disable failure
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10782  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10734  filelock: Remove locks reliably when fcntl/close race is detected
- !10804 [sync] PR-10761:  leds: an30259a: Use devm_mutex_init() for mutex initialization
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10680  crypto: ecdh - explicitly zeroize private_key
- !10791 [sync] PR-10787:  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10779  Fix CVE-2021-47582
- !10780  crypto: hisilicon/sec - Fix memory leak for sec resource release
- !10783  s390/pkey: Wipe sensitive data on failure
- NFSD: Fix the behavior of READ near OFFSET_MAX
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
</package>
<package pkgid="f57dd32305628c986d4ec380b55fd4a230ab6d35443bbdb704ae0e306dac6298" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="136.99.0.180.oe2203sp1"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.90.0.171" date="1724155200">- !10981 [sync] PR-10679:  ibmvnic: Add tx check to prevent skb leak
- !11009  mm: avoid overflows in dirty throttling logic
- !10980  CVE-2024-42304
- mm: avoid overflows in dirty throttling logic
- !10983  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10938  CVE-2023-52868
- !10959  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10613  can: mcp251xfd: fix infinite loop when xmit fails
- !10952  Fix CVE-2024-36880
- !10790 [sync] PR-10652:  nvme: avoid double free special payload
- !10789 [sync] PR-10624:  ata: libata-core: Fix double free on error
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ibmvnic: Add tx check to prevent skb leak
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10955  leds: trigger: Unregister sysfs attributes before calling deactivate()
- !10866 [sync] PR-10514:  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10932  drm/lima: fix shared irq handling on driver remove
- !10948  net: nexthop: Initialize all fields in dumped nexthops
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- !10929  libceph: fix race between delayed_work() and ceph_monc_stop()
- thermal: core: prevent potential string overflow
- drm/lima: fix shared irq handling on driver remove
- !10747  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10917  Fix CVE-2024-36031
- !10910  Fix CVE-2024-40966
- keys: Fix overwrite of key expiration on instantiation
- keys, dns: Fix size check of V1 server-list header
- keys, dns: Fix missing size check of V1 server-list header
- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
- !10916  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10848  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- nvme: avoid double free special payload
- ata: libata-core: Fix double free on error
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.91.0.172" date="1724760000">- !11162  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11152  protect the fetch of -&gt;fd[fd
- !11096  usb: xhci: Check endpoint is valid before dereferencing it
- !11093  mISDN: Fix a use after free in hfcmulti_tx()
- !11146  drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11082  f2fs: fix to don't dirty inode for readonly filesystem
- !11097  io_uring: lock overflowing for IOPOLL
- !11124  Fix CVE-2023-52893
- !11139 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !11098  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11029  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- !11076  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11080  ixgbe: fix pci device refcount leak
- !11002  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10986  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11137  netfilter: nf_tables: unregister flowtable hooks on netns exit
- !11116  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11053  m68k: Fix spinlock race in kernel thread creation
- !11052  phonet: fix rtm_phonet_notify() skb allocation
- !11127  drm/amd/display: Check pipe offset before setting vblank
- !11120  misc: fastrpc: Don't remove map on creater_process and device_release
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- drm/amd/display: Check pipe offset before setting vblank
- gsmi: fix null-deref in gsmi_get_variable
- !11090  net/mlx5: Always drain health in shutdown callback
- misc: fastrpc: Don't remove map on creater_process and device_release
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- io_uring: lock overflowing for IOPOLL
- usb: xhci: Check endpoint is valid before dereferencing it
- mISDN: Fix a use after free in hfcmulti_tx()
- !11066  xhci: Fix null pointer dereference when host dies
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- ixgbe: fix pci device refcount leak
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11073  drm/virtio: Fix GEM handle creation UAF
- drm/virtio: Fix GEM handle creation UAF
- !11046  bpf: Fix a segment issue when downgrading gso_size
- !11039  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- xhci: Fix null pointer dereference when host dies
- !11016 [sync] PR-10965:  perf: Optimize perf_pmu_migrate_context()
- m68k: Fix spinlock race in kernel thread creation
- phonet: fix rtm_phonet_notify() skb allocation
- !11000  media: venus: fix use after free in vdec_close
- !11024  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- !11014  media: mediatek: vcodec: Handle invalid decoder vsi
- !10972  ext4: fix infinite loop when replaying fast_commit
- bpf: Fix a segment issue when downgrading gso_size
- !11031 [sync] PR-11006:  kvm: s390: Reject memory region operations for ucontrol VMs
- !10994  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- !11032 [sync] PR-10976:  CVE-2024-42126
- !10967  Revert "kbuild: fix false positive warning/error about missing libelf"
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- !10989  drm/amd/display: Add NULL pointer check for kzalloc
- !11020  net: usb: qmi_wwan: fix memory leak for not ip packets
- kvm: s390: Reject memory region operations for ucontrol VMs
- !10988  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10961  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- !10452 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !10996  CVE-2024-42290
- perf: Optimize perf_pmu_migrate_context()
- media: mediatek: vcodec: Handle invalid decoder vsi
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- drm/amd/display: Add NULL pointer check for kzalloc
- s390/sclp: Fix sclp_init() cleanup on failure
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- ext4: fix infinite loop when replaying fast_commit
- Revert "kbuild: fix false positive warning/error about missing libelf"
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- ipv6: sr: fix missing sk_buff release in seg6_input_core</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.92.0.173" date="1725451200">- !11373  xdp: fix invalid wait context of page_pool_destroy()
- !11369  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11362  kcm: Serialise kcm_sendmsg() for the same socket.
- !11353  regulator: da9211: Use irq handler when ready
- !11348 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11318  efi: fix NULL-deref in init error path
- !10997  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11285  fix CVE-2024-43905
- !11344  netfilter: ctnetlink: use helper function to calculate expect ID
- !11332  jbd2: avoid mount failed when commit block is partial submitted
- !11191  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11200  ibmvnic: don't release napi in __ibmvnic_open()
- !10750 v2  CVE-2024-41016
- !11195  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- !11296  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11289  Add exception protection processing for vd in axi_chan_handle_err function
- !11312  nvme-fabrics: use reserved tag for reg read/write command
- !11311  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- regulator: da9211: Use irq handler when ready
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- jbd2: avoid mount failed when commit block is partial submitted
- efi: fix NULL-deref in init error path
- nvme-fabrics: use reserved tag for reg read/write command
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- !11059  drm/amdgpu: change vm-&gt;task_info handling
- !11056  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- !11281  misc: fastrpc: Fix use-after-free race condition for maps
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- Add exception protection processing for vd in axi_chan_handle_err function
- !11278  net/sched: act_mpls: Fix warning during failed attribute validation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11225  apparmor: Fix null pointer deref when receiving skb during sock creation
- misc: fastrpc: Fix use-after-free race condition for maps
- !11274  serial: core: check uartclk for zero to avoid divide by zero
- !11101  wifi: mac80211: sdata can be NULL during AMPDU start
- net/sched: act_mpls: Fix warning during failed attribute validation
- !11213  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11268  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11244 [sync] PR-11210:  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11253  CVE-2024-43892
- !11218  scsi: qla2xxx: validate nvme_local_port correctly
- !11180  block: initialize integrity buffer to zero before writing it to media
- !11112  sysctl: always initialize i_uid/i_gid
- !11166  f2fs: let's avoid panic if extent_tree is not created
- !11153  fix cve-2023-52896
- !11165  tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- memcg: protect concurrent access to mem_cgroup_idr
- !11232  Bluetooth: MGMT: Add error handling to pair_device()
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11172  tracing: Fix overflow in get_free_elt()
- !11212 [sync] PR-11123:  fix CVE-2024-42288
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- scsi: qla2xxx: validate nvme_local_port correctly
- !11161  usb: vhci-hcd: Do not drop references before new references are gained
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- scsi: qla2xxx: Fix for possible memory corruption
- !11148  powerpc/pseries: Fix scv instruction crash with kexec
- !11141  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ibmvnic: don't release napi in __ibmvnic_open()
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- block: initialize integrity buffer to zero before writing it to media
- tracing: Fix overflow in get_free_elt()
- f2fs: let's avoid panic if extent_tree is not created
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- usb: vhci-hcd: Do not drop references before new references are gained
- btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- wifi: mac80211: sdata can be NULL during AMPDU start
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.93.0.174" date="1726142400">- !10941 v2  xfs: fix file creation
- !11492  Fix CVE-2022-48887
- !11471  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11103  soc: qcom: pdr: protect locator_addr with the main mutex
- !11446  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11392  fix CVE-2023-45896
- !11445 [sync] PR-11015:  nvme-pci: add missing condition check for existence of mapped data
- !11283  CVE-2024-44935
- !11451 [sync] PR-11390:  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- !11442 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- nvme-pci: add missing condition check for existence of mapped data
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11396 [sync] PR-11324:  drm/amd/display: Add null checker before passing variables
- !11416  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11429  nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11331  dma: fix call order in dmam_free_coherent
- !11170  CVE-2024-42267
- !11236  CVE-2024-43907
- !11410  btrfs: do not start relocation until in progress drops are done
- nfc: pn533: initialize struct pn533_out_arg properly
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- !11412  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11407 [sync] PR-11403:  btrfs: do not WARN_ON() if we have PageError set
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- btrfs: do not start relocation until in progress drops are done
- !11399  fuse: Initialize beyond-EOF page contents before setting uptodate
- btrfs: do not WARN_ON() if we have PageError set
- !11365  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11377  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11240 [sync] PR-11174:  md: restore 'noio_flag' for the last mddev_resume()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- drm/amd/display: Add null checker before passing variables
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- dma: fix call order in dmam_free_coherent
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- md: restore 'noio_flag' for the last mddev_resume()
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- xfs: Fix file creation failure</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.94.0.175" date="1726660800">- !11516  fix CVE-2024-44988
- !11523  ipv6: prevent UAF in ip6_send_skb()
- !11519  ipv6: fix possible UAF in ip6_finish_output2()
- !11489 [sync] PR-11487:  bna: ensure the copied buf is NUL terminated
- !8756  net: USB: Fix wrong-direction WARNING in plusb.c
- !11533  Fix CVE-2023-52915
- media: dvb-usb-v2: af9035: fix missing unlock
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- !11483  drm/qxl: Add check for drm_cvt_mode
- !11477  Fix CVE-2023-52916
- !11458  usb: gadget: core: Check for unset descriptor
- !11511  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- bna: ensure the copied buf is NUL terminated
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- net: USB: Fix wrong-direction WARNING in plusb.c</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.95.0.176" date="1727265600">- !11712  btrfs: fix qgroup reserve leaks in cow_file_range
- !11724  Squashfs: sanity check symbolic link size
- !11710  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11709  CVE-2024-46751
- !11702  userfaultfd: fix checks for huge PMDs
- !11699  x86/mm: Fix pti_clone_pgtable() alignment assumption
- Squashfs: sanity check symbolic link size
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- !9776  wifi: ar5523: enable proper endpoint verification
- !11664  drm/amd/pm: fix the Out-of-bounds read warning
- !11643  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11650  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11634  fix CVE-2024-46723
- !11647  net: hns3: fix a deadlock problem when config TC during resetting
- !11536  usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- !11627 [sync] PR-11615:  mmc: mmc_test: Fix NULL dereference on allocation failure
- !11576 [sync] PR-11012:  hfsplus: fix uninit-value in copy_name
- !11589  drm/amd/display: Skip finding free audio for unknown engine_id
- !11587  jfs: don't walk off the end of ealist
- !11580  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11636  netfilter: tproxy: bail out if IP has been disabled on the device
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- net: hns3: fix a deadlock problem when config TC during resetting
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11611  Input: uinput - reject requests with unreasonable number of slots
- !10937  f2fs: avoid format-overflow warning
- drm/amdgpu: fix ucode
- !11591 [sync] PR-8827: v2  iomap: fix sub-page not set dirty state
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11597 v2  mptcp: pm: avoid possible UaF when selecting endp
- !11605  Fix iBMA bug and change version
- !11601 [sync] PR-11583:  nfs: always check dreq-&gt;error after a commit
- Input: uinput - reject requests with unreasonable number of slots
- !11590  CVE-2024-36915
- !10934  drm/amd/display: Check index msg_id before read or write
- !10935  ata: libata-core: Fix null pointer dereference on error
- !11599 [sync] PR-11584:  vfs: Don't evict inode under the inode lru traversing context
- BMA: Fix edma driver initialization problem and change the version number.
- !11595  gtp: pull network headers in gtp_dev_xmit()
- nfs: always check dreq-&gt;error after a commit
- vfs: Don't evict inode under the inode lru traversing context
- mptcp: pm: avoid possible UaF when selecting endp
- gtp: pull network headers in gtp_dev_xmit()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11575  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- !11572  nilfs2: fix general protection fault in nilfs_btree_insert()
- kobject_uevent: Fix OOB access within zap_modalias_env()
- hfsplus: fix uninit-value in copy_name
- nilfs2: add missing check for inode numbers on directory entries
- !11571  NFSD: Fix ia_size underflow
- nilfs2: fix general protection fault in nilfs_btree_insert()
- NFSD: Fix ia_size underflow
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- f2fs: avoid format-overflow warning
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- wifi: ar5523: enable proper endpoint verification</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.96.0.177" date="1728561600">- !12070 [sync] PR-12050:  um: line: always fill *error_out in setup_one_line()
- !11965  drm/amd/pm: Fix negative array index read
- !12060  CVE-2024-46857
- !12047  perf/x86/intel: Limit the period on Haswell
- um: line: always fill *error_out in setup_one_line()
- !12041 [sync] PR-12032:  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12042 [sync] PR-12002:  drm/amd/display: Assign linear_pitch_alignment even for VM
- !12021  drm/amd/display: Check gpio_id before used as array index
- !12025  ASoC: meson: axg-card: fix 'use-after-free'
- !11991 [sync] PR-11941:  usb: typec: ucsi: Fix null pointer dereference in trace
- !11990 [sync] PR-11939:  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !12035  ksmbd: discard write access to the directory open
- !12037  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11996  drm/amd/display: Add array index check for hdcp ddc access
- !12010  rtmutex: Drop rt_mutex::wait_lock before scheduling
- perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Assign linear_pitch_alignment even for VM
- serial: sc16is7xx: fix invalid FIFO access with special register set
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- ksmbd: discard write access to the directory open
- ASoC: meson: axg-card: fix 'use-after-free'
- !11872 [sync] PR-11817:  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- drm/amd/display: Check gpio_id before used as array index
- !12001  nvmet-tcp: fix kernel crash if commands allocation fails
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11911  ksmbd: unset the binding mark of a reused connection
- !11988 [sync] PR-11938:  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11934 [sync] PR-11925:  nilfs2: protect references to superblock parameters exposed in sysfs
- !11978  CVE-2024-46814
- !11932 [sync] PR-11875:  btrfs: handle errors from btrfs_dec_ref() properly
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- !11955  Fix CVE-2024-44958 5.10
- !11743 [sync] PR-11693:  Fix CVE-2024-39501
- !11947  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11917  ethtool: check device is present when getting link settings
- !11937  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11923  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- nilfs2: protect references to superblock parameters exposed in sysfs
- btrfs: handle errors from btrfs_dec_ref() properly
- !11841  fix CVE-2024-46771
- !11913 [sync] PR-11890:  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11793  ALSA: line6: Fix racy access to midibuf
- !11868  pktgen: use cpus_read_lock() in pg_net_init()
- !11892 [sync] PR-11866: v2  drm/amd/display: Ensure index calculation will not overflow
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11869  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11904  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11886  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11873 [sync] PR-11494:  ext4: Fix race in buffer_head read fault injection
- !11880  PCI: Add missing bridge lock to pci_bus_lock()
- !11879  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11739 [sync] PR-11625:  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11851  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11849  bcache: fix variable length array abuse in btree_iter
- !11833  scsi: bfa: Ensure the copied buf is NUL terminated
- !11832  enic: Validate length of nl attributes in enic_set_vf_port
- !11831  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- !11830  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/amd/display: Ensure index calculation will not overflow
- !11827  CVE-2024-46781
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11829 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- PCI: Add missing bridge lock to pci_bus_lock()
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11858 v2  Fix CVE-2024-45025
- !11768 [sync] PR-11733:  Input: MT - limit max slots
- !11846  bpf: verifier: prevent userspace memory access
- ext4: Fix race in buffer_head read fault injection
- !11750  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11853 [sync] PR-11815:  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- pktgen: use cpus_read_lock() in pg_net_init()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11676  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11674  netem: fix return value if duplicate enqueue fails
- !11808  apparmor: fix possible NULL pointer dereference
- !11807  drm/amdgpu: Fix out-of-bounds write warning
- !11735  fix CVE-2024-46777 for SP1
- !11684  binder: fix UAF caused by offsets overwrite
- !11778 [sync] PR-11729:  scsi: qedi: Fix crash while reading debugfs attribute
- !11779 [sync] PR-11730:  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11782 [sync] PR-11728:  lib: objagg: Fix general protection fault
- !11781 [sync] PR-11727:  jfs: fix null ptr deref in dtInsertEntry
- !11780 [sync] PR-11726:  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11776 [sync] PR-11738:  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- !11745  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11775 [sync] PR-11752:  driver: iio: add missing checks on iio_info's callback access
- !11800  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- !11762  sch/netem: fix use after free in netem_dequeue
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- ALSA: line6: Fix racy access to midibuf
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- media: xc2028: avoid use-after-free in load_firmware_cb()
- scsi: qedi: Fix crash while reading debugfs attribute
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- driver: iio: add missing checks on iio_info's callback access
- Input: MT - limit max slots
- sch/netem: fix use after free in netem_dequeue
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- udf: Avoid excessive partition lengths
- udf: Define EFSCORRUPTED error code
- binder: fix UAF caused by offsets overwrite
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.97.0.178" date="1728993600">- !12117  CVE-2024-43855
- !12167  crypto: stm32/cryp - call finalize with bh disabled
- !12203  spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12206 v2  atm: idt77252: prevent use after free in dequeue_rx()
- !12143  nfc: pn533: Add poll mod list filling check
- !12150  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- atm: idt77252: prevent use after free in dequeue_rx()
- !12173  fou: remove warn in gue_gro_receive on unsupported protocol
- !12169  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- !12165  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12120  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12119  ice: Add netif_device_attach/detach into PF reset flow
- !12118  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- !12085 [sync] PR-11856:  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12046  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12044  s390/sclp: Prevent release of buffer in I/O
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- md: fix a crash in mempool_free
- !12097  netfilter: nft_socket: fix sk refcount leaks
- !12099  CVE-2024-46858
- !12098  net: dpaa: Pad packets to ETH_ZLEN
- !12091  USB: usbtmc: prevent kernel-usb-infoleak
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- USB: usbtmc: prevent kernel-usb-infoleak
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12083  drm/i915/gt: Cleanup partial engine discovery failures
- !12079  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12054  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.98.0.179" date="1729684800">- !12297  CVE-2024-46822
- !12242 [sync] PR-12227:  nbd: Fix signal handling
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12260  drm/lima: fix a memleak in lima_heap_alloc
- !12258  media: go7007: fix a memleak in go7007_load_encoder
- !12259  octeontx2-af: Use separate handlers for interrupts
- !12256 [sync] PR-12254:  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12265  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12243 v2  net/mlx5e: Fix netif state handling
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- media: go7007: fix a memleak in go7007_load_encoder
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12221 [sync] PR-12102:  Fix CVE-2024-46826
- !12156  bonding: Fix CVE-2024-44990
- !12158  bonding: fix xfrm real_dev null pointer dereference
- !12157  netfilter: flowtable: initialise extack before use
- !11298  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- !8675 [sync] PR-8534:  riscv: process: Fix kernel gp leakage
- !8674 [sync] PR-8542:  octeontx2-af: Fix possible null pointer dereference.
- !12161  md/raid1: don't free conf on raid0_run failure
- !12237  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- !12235  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- net/mlx5e: Fix netif state handling
- !12184  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12183  netns: Make get_net_ns() handle zero refcount net
- !12180  net/sched: Fix CVE-2024-36244
- !12177  ipv6: sr: fix invalid unregister error path
- !12191  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- !12192  netfilter: nft_flow_offload: reset dst in route object after setting up flow
- !12193  tcp: do not accept ACK of bytes we never sent
- !12194  mlxsw: spectrum_acl_tcam: Fix warning during rehash
- !12195  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- !12196  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12211  scsi: qla2xxx: During vport delete send async logout explicitly
- !12210  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !12231 [sync] PR-12208:  Some bugfixs for ubi/fs
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- !12224 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12064 [sync] PR-11942:  sbitmap: backport bugfix patches
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- tcp: do not accept ACK of bytes we never sent
- netfilter: nft_flow_offload: reset dst in route object after setting up flow
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- md/raid1: don't free conf on raid0_run failure
- bonding: fix xfrm real_dev null pointer dereference
- netfilter: flowtable: initialise extack before use
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- riscv: process: Fix kernel gp leakage
- octeontx2-af: Fix possible null pointer dereference.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-136.99.0.180" date="1730289600">- !12652  mm/gup: fix gup_pud_range() for dax
- !12671  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12247  nilfs2: fix state management in error path of log writing function
- !12647  sock_map: Add a cond_resched() in sock_hash_free()
- !12646  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12645  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12644  net: do not delay dst_entries_add() in dst_release()
- !12630 [sync] PR-12605:  fix CVE-2024-46802
- !12657  NFSD: Limit the number of concurrent async COPY operations
- !12636  ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12274  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12613  drm/amd/display: Check null pointer before dereferencing se
- !12622  NFC: nci: Bounds check struct nfc_target arrays
- !12619  PCI: mt7621: Add sentinel to quirks table
- !12504  ocfs2: cancel dqi_sync_work before freeing oinfo
- NFSD: Limit the number of concurrent async COPY operations
- mm/gup: fix gup_pud_range() for dax
- !12625  net: ethernet: nixge: fix NULL dereference
- !12626  libbpf: Handle size overflow for ringbuf mmap
- sock_map: Add a cond_resched() in sock_hash_free()
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- net: do not delay dst_entries_add() in dst_release()
- !12624  hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- ALSA: asihpi: Fix potential OOB array access
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- libbpf: Handle size overflow for ringbuf mmap
- net: ethernet: nixge: fix NULL dereference
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- NFC: nci: Bounds check struct nfc_target arrays
- PCI: mt7621: Add sentinel to quirks table
- !12602 [sync] PR-12459:  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12601 [sync] PR-12453:  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12600 [sync] PR-12442:  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12446  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !8926  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12582  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12578  gpio: amd8111: Fix PCI device reference count leak
- !12456  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !12564  ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- !12561  fix CVE-2024-49900
- !12562  fix CVE-2024-47667
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12450  Fix CVE-2024-26917 and CVE-2024-50025
- !12544 [sync] PR-12369:  x86/ioapic: Handle allocation failures gracefully
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12401  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- gpio: amd8111: Fix PCI device reference count leak
- !12416  btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- !12420  nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- !12421  udf: Fix preallocation discarding at indirect extent boundary
- !12419  jfs: Fix uaf in dbFreeBits
- !12418  jfs: check if leafidx greater than num leaves per dmap tree
- !12415  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12417  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12522  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12543  media: pci: cx23885: check cx23885_vdev_init() return
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- jfs: Fix uninit-value access of new_ea in ea_buffer
- x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12251  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12514  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12513  jfs: Fix array-index-out-of-bounds in diFree
- !12468  mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- !12388  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12386  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12381  fix CVE-2024-46675
- !12364  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12447  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12463  fix CVE-2024-42301
- !12489  CVE-2024-40965_openEuler-22.03-LTS-SP1
- !12481  CVE-2024-41015
- !12485  CVE-2024-38667
- !12483  CVE-2024-36286
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12457  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12430  CVE-2024-43894
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !12392  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12433 v2  Fix CVE-2022-49006
- !12356 [sync] PR-12334:  drm/nouveau: prime: fix refcount underflow
- !12359 [sync] PR-12342:  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12371 [sync] PR-12344:  of: module: prevent NULL pointer dereference in vsnprintf()
- !12352  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12222 [sync] PR-12075:  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- !12357 [sync] PR-12318:  nfsd: call cache_put if xdr_reserve_space returns NULL
- soundwire: cadence: fix invalid PDI offset
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12271  drm/amdgpu: fix mc_data out-of-bounds read warning
- tracing: Free buffers when a used dynamic event is removed
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- !12396  tracing/timerlat: Fix a race during cpuhp processing
- !12405  CVE-2024-43841
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- udf: Fix preallocation discarding at indirect extent boundary
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- of: module: prevent NULL pointer dereference in vsnprintf()
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12339  CVE-2023-52855
- drm/nouveau: prime: fix refcount underflow
- !12346  CVE-2024-35990
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12337  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12303  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12302  media: imon: fix access to invalid resource for the second interface
- dma: xilinx_dpdma: Fix locking
- usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- media: imon: fix access to invalid resource for the second interface
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="cd9d0b4a667cdbeb86bf1d6875b2180d1cb253feffb5f6499e05f60f724278d4" name="krb5" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="6fe0f717a0093509aa7536104fd0cf78d867c945d9b5cd95663dd104ecf426fb" name="krb5" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="d7045599615f71f89e18d5c3ecdd62f3d5f6a1d2a48c2a4f8491d0d39d4a1b13" name="krb5-client" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="e46584b0639eeed8dd63999dd0f2538d465e68fc308ba6dfcef3f87d858667a6" name="krb5-client" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="fe70812bca251c8e3760b93c8479f74c677d4f7bfe128e1cb21cf776b585dec4" name="krb5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="5f0ad1d3e24ab2ec3a490bafaa738d2685b1b0d9078eb958e97f39148787e877" name="krb5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="3923310af2114e5916d4aa6277b5c8a461966d7121d4d4ae021dd89b54e16225" name="krb5-debugsource" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="2babbd8bc39f34ff5bb0d2e9abfc351ebb0f0a880d2fc9c35c6d2cc82f17fc62" name="krb5-debugsource" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="c63759ec04c430aec512134e18f3313d300cd34ddb8dac3eeefea8c3de2bb27a" name="krb5-devel" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="9ca165ea3fae8b853625a28b475513b961deeac032f32309d34264110de106b6" name="krb5-devel" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="ecd2faaa021a81555c178a79fe4137eb16977978b812140278e9b28be0680dbd" name="krb5-help" arch="noarch">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="2e1546aac1fe32241e9f69d9bc5b09c2d874b408165a96f8c4cf9994b5b1eeac" name="krb5-help" arch="noarch">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="d9e218dd04163f39efc25305207c608350bb9d974cf0edb154f9e89aa40c7f25" name="krb5-libs" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="26bad8ce78d1d9ef248f0e34151dde59726597afe22e7be85d3068698cc8caae" name="krb5-libs" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="1616c76575c59c8ba40ec9e74d507c7eda125ba37c2b38f0340e5bc084156c73" name="krb5-server" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp1"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="624f0ad630fa981d4b56f597bd5a0c3ac11f4c37b4e892f98c2f52837c4eca45" name="krb5-server" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="9.oe2203sp1"/>
  <changelog author="gaoyusong &lt;gaoyusong1@huawei.com&gt; - 1.19.1-3" date="1629892800">- Fix CVE-2021-37750</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-1" date="1639396800">- Update to 1.19.2</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-2" date="1646654400">- Add ExecStartPost option to krb5kdc.service for solving error message when krb5kdc starting</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-3" date="1666180800">- update version to 1.19.2.3</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-4" date="1669982400">- fix CVE-2022-42898</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-5" date="1671537600">- fix some coredump</changelog>
  <changelog author="zhouchenchen &lt;zhouchenchen@huawei.com&gt; - 1.19.2-6" date="1671624000">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-7" date="1686225600">- backport some patches</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
</package>
<package pkgid="8e5a2aeee41b2a618d7090ff9c87c9c9723fe561e5a3d3b3fefd62f67228a473" name="kronosnet-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="d2fb25b5abb75284513813c7023453da779a1721d440af6aee99e0bd80f8e7f8" name="kronosnet-debugsource" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="10e98fabca90c5dbf5ce652082be8c6ff92c731cd27e0622f83fbf4202db8e73" name="lcr" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="7fd878ff5b4d081cda6439369b41ef897fa29ab9ec5b9bf14710a7ea6562605e" name="lcr" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="11.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="wujichao&lt;wujichao1@huawei.com&gt; - 2.0.9-11" date="1729166400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix invalid args len set in execute lxc attach</changelog>
</package>
<package pkgid="7e67e7635c9205e648a449de84ed8ab1f74672d738bfb9e5a8285bbf89d61853" name="lcr" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="2aabfaeb917c7d9001e0c153f62a33bdbddd037517cf522515822688ab60d7ec" name="lcr" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="ec4d5929c74b63d7ac59a57384469ae4a57d666cb848b046d6d9872dce0d5473" name="lcr-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="4cf48ddac1783e1f98e5a4a5c4d3ba442b1ae7bd7b5a3f31cddcf9c129af72cb" name="lcr-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="11.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="wujichao&lt;wujichao1@huawei.com&gt; - 2.0.9-11" date="1729166400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix invalid args len set in execute lxc attach</changelog>
</package>
<package pkgid="190844b7a7a1c9db43fcf6bdc9ceb66c99f5ea4a4ccf748c79a830b6600d60f3" name="lcr-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="91766ff29cdb7e5ef9a084469bd45032e8d55bf4be34f7c2af6c78b7a53598c8" name="lcr-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="01890360e40cab03cef8128752db8f1e82e31ad079edf15d910d267f506e5c0a" name="lcr-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="7aec5452aaaf5a5ade58ecef4ba7df6e47490f6bbfe772198f37ba27a8354d47" name="lcr-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="11.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="wujichao&lt;wujichao1@huawei.com&gt; - 2.0.9-11" date="1729166400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix invalid args len set in execute lxc attach</changelog>
</package>
<package pkgid="09230fd19367d99d8b4b5da02cfb03f3d947eb633c60e2d52409b4b93fe6ad0e" name="lcr-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="090ef03511066b712ced7973b503170db21765c1f80d53be24304f2bf5ca31ea" name="lcr-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="2cdb9cf2c4791800f1a7d096efb4906850af7f5e8457b8eecbeefa30d7dbed9d" name="lcr-devel" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="10.oe2203sp1"/>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="b83b2ed8339e26372e0f584421b00f7c4d7bab1cb607d3a738fa0b64e58bea70" name="lcr-devel" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="11.oe2203sp1"/>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.0.9-9" date="1706875200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add ppc64le support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-10" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
  <changelog author="wujichao&lt;wujichao1@huawei.com&gt; - 2.0.9-11" date="1729166400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix invalid args len set in execute lxc attach</changelog>
</package>
<package pkgid="4792d879b0dff9ef1081864afb451fcff162bb6c7c1ceceb0b99b0104b86a030" name="lcr-devel" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="7.oe2203sp1"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.8-8" date="1667908800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
</package>
<package pkgid="9280e122a3d6f68ab0b45e3af1962c6fd67f2ed12495161d369207e6664d3de5" name="lcr-devel" arch="aarch64">
  <version epoch="0" ver="2.0.9" rel="8.oe2203sp1"/>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.8-9" date="1670328000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add macro to adapt musl libc and add add-gids option for exec</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.8-10" date="1671278400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:handle security warning and modify schema</changelog>
  <changelog author="wangrunze&lt;wangrunze13@huawei.com&gt; - 2.0.9-1" date="1671278401">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to v2.0.9</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2.0.9-2" date="1676548800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Add loongarch64 support</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-3" date="1676980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix update cpu-rt period failed and fix layer size type as int64</changelog>
  <changelog author="zhangxiaoyu&lt;zhangxiaoyu58@huawei.com&gt; - 2.0.9-4" date="1682337600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support update resources, remote-layer and files limit</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 2.0.9-5" date="1691409600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-6" date="1694520000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential log error, empty pointer reference and overflow</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-7" date="1695038400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set env to avoid invoke lxc binary directly</changelog>
  <changelog author="jikai&lt;jikai11@huawei.com&gt; - 2.0.9-8" date="1702296000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="4ac5db222b2aa52d274303c9cb6b13060bc878754e74dc8b7f8d9dd65f1305ac" name="less" arch="aarch64">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="bf058d29d41c5cba91e71ff9141d09b6aa7ec0eb46cce86b2be6b41d47c5e607" name="less" arch="aarch64">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="912d54c9a88d0f9bd02138bf82fcaca82bc3d3ba9bfa38f43cd08458f8563bc5" name="less" arch="aarch64">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="42e44d32b7ed35fc4d3ad68802a726a99ab631059d8276741a194ec7c47aa935" name="less-debuginfo" arch="aarch64">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="f6f68d0a769587ea9ad2de885f09d57031a2c697019459dea2890edc280243af" name="less-debuginfo" arch="aarch64">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="2b70160b60b9263c9812b355bb3c63e48e7e0c74dc0ec84887ce3eec3ed57c7f" name="less-debuginfo" arch="aarch64">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="d54ec7e623480acfd9c51e874e958d29bc0bf36d8c05eb8d0097623000617ba9" name="less-debugsource" arch="aarch64">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="e71fcc4795aea77ec05400228e4dba4772af503e3b73bb261f03228dab029c0f" name="less-debugsource" arch="aarch64">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="ee1ceaa9b59072ed177a2a815954d5ea393799f8564df7c75a17efd0291b8498" name="less-debugsource" arch="aarch64">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="f600e85fd020a36afab5b60ce0758eb456479386ac9d3953b3a725f62d7f0a36" name="less-help" arch="noarch">
  <version epoch="0" ver="590" rel="4.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@huawei.com&gt; - 563-2" date="1622203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
       Create only one ifile when a file is opened under different names.
       Remove extraneous frees, associated with removed call to lrealpath.
       Fix crash when call set_ifilename with a pointer to the name that is
       Remove unnecessary call to pshift in pappend.
       Reset horizontal shift when opening a new file.
       Protect from buffer overrun.
       Make histpattern return negative value to indicate error.
       Lesskey: don't translate ctrl-K in an EXTRA string.
       Ignore SIGTSTP in secure mode.
       Fix "Tag not found" error while looking for a tag's location
       Fix minor memory leak with input preprocessor.</changelog>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 563-3" date="1627646400">- DESC: delete -S git from autosetup, and delete BuildRequires git</changelog>
  <changelog author="wangjie &lt;wangjie375@huawei.com&gt; - 590-1" date="1639483200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update less to 590</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
</package>
<package pkgid="b5da6d51a0e502f97766e6f2982ac09ff4567f5d8fcbd01885efaa02b192651c" name="less-help" arch="noarch">
  <version epoch="0" ver="590" rel="5.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
</package>
<package pkgid="980b37ea8d814006e17d2273eb5d03e843ba7697d0d5e76f52fabc7a05a6ba0f" name="less-help" arch="noarch">
  <version epoch="0" ver="590" rel="6.oe2203sp1"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 590-2" date="1665662400">- DESC:fix the changelog exception macro</changelog>
  <changelog author="Eibz-Chan &lt;chenbingzhao@huawei.com&gt; - 590-3" date="1670587200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:[add] backport patches from upstream
	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
	Fix-crash-when-enter-invaid-pattern-in-command.patch</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 590-4" date="1676548800">- fix CVE-2022-46663</changelog>
  <changelog author="liweigang &lt;izmirvii@gmail.com&gt; - 590-5" date="1708344000">- fix CVE-2022-48624</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 590-6" date="1713787200">- fix CVE-2024-32487</changelog>
</package>
<package pkgid="b5bba05ed5bd2f46fd6136a7d515102f3b7c9aab909fee3f94a9a19014a586ee" name="libX11" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="4a84241f6eaff76473d74890726af13aa3b5ff2349670380248749aa6f85f712" name="libX11" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="937bcbbd07924eabc24b37e9edac44feb2126ea66c646e0d175bb019e9ddd937" name="libX11-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="c7af7311c4bbf2d549cc185f0618afe8e41d7a2885b30ebaaf6e6ee6bc80e72d" name="libX11-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="c766137bfdd4f4c0a2c4f2127dc7d188c432d7c4ce8476ad1b4315bb9f631174" name="libX11-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="2199a7360a23cd8d56f95532df2956acae60b1b7186edc8dc1c8b84e0451ab51" name="libX11-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="d87cb8948e1cc7a1b079857cc0763a21c92dfe3dc0494e32491b0f8aad38c1f6" name="libX11-devel" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="c9ebc8e9e201d6483170a8f5057432c71f223fd10688ad06989fb85856c91f24" name="libX11-devel" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="e3908d80d542219662a83b588ff349ce3adc470dec37f05d6dcfd86287084c5a" name="libX11-help" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="6.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
</package>
<package pkgid="02032bdd1b73c5bc20c49762a0b0d495cba365d4dcb2f650a2df5cc32a30ed3f" name="libX11-help" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="8.oe2203sp1"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@huawei.com&gt; - 1.7.2-1" date="1638014400">- update to 1.7.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@huawei.com&gt; - 1.7.2-2" date="1639569600">- provide XKBgeom header file</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-3" date="1655812800">- fix error from unkown X86FMacroxx keysym</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.7.2-4" date="1666612800">- fix CVE-2022-3554,CVE-2022-3555</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1.7.2-5" date="1667563200">- disable static library</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1.7.2-6" date="1687176000">- fix CVE-2023-3138</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.2-8" date="1696420800">- Fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
- Merge sw64 patch</changelog>
</package>
<package pkgid="3a37ff1740e3bc2af511c73a6c038b4d73c41d692dc6cd48db38643d2bda31e2" name="libXpm" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="ccff0188964ebf692fa489836c3ba32b6351d259dea6f58f492bf2e98771aec1" name="libXpm" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="85e45de4349151ac41702c981b6575ac72e4948aea0675100bcaa4b08252dafe" name="libXpm-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="6679ea14022d49f24786693b7f52d58df3d9eaa0ba604894f7613d8beecb5350" name="libXpm-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="c984cafdaf23411b266b385f5b4f7bbbeaaed64abd4026a71ed448b7e0bc5e59" name="libXpm-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="1552eb2d0130cfcd99d47882ade88f201dfcda903eade64a464d392e71b4cc55" name="libXpm-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="7f92735106762373399c4f08df240862356cd524f8e9274eff7f51c23f335841" name="libXpm-devel" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="8632700594a6c928848cd727fba769c71aa9d746a997efa1e1206dd8891ad961" name="libXpm-devel" arch="aarch64">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="391f9b61a69868aa32f1d1c269c27dbff99b901b7f4521531804f7370cdf1c74" name="libXpm-help" arch="noarch">
  <version epoch="0" ver="3.5.13" rel="4.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
</package>
<package pkgid="50c00b3aeb4206d2534c40385e897615aea848b39b23270860aed8cf23d9213c" name="libXpm-help" arch="noarch">
  <version epoch="0" ver="3.5.13" rel="5.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-3" date="1669377600">- update Correct tar file</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.5.13-4" date="1675252800">- fix CVE-2022-44617,CVE-2022-46285,CVE-2022-4883</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.13-5" date="1696420800">- Add patches harden CVE-2023-43786, CVE-2023-43787
- Fix CVE-2023-43788, CVE-2023-43789</changelog>
</package>
<package pkgid="8407fbb882882d37423f21028e836cc43f014ce4a91a8bf1b32038b4fa7cfdca" name="libXxf86vm" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="d91a184f020ab504bbc4918580d635fc02b39102023d27bf3ff7af8ede9c70e3" name="libXxf86vm-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="aae2a2368bb562948b653118967d69e34795797844501c23d93a18db775dbe4a" name="libXxf86vm-debugsource" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="7161e3fb0c4b622347135edb5cc863efbf84d24c8ab58136acd46d874c3b2cac" name="libXxf86vm-devel" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="5775d6343b67b68de396909acf7bba8aa752187e9243d21c3e1f93a537e5a5f3" name="libXxf86vm-help" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="2.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-1" date="1667476800">- update 1.1.5</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.1.5-2" date="1677326400">- disable static library</changelog>
</package>
<package pkgid="e1ebbc098e1e0f981ba0b09a910b20e5db5c9ab0f3cac78d5ee76aef7450014d" name="libarchive" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="62b081d9ad692aa0ef2df41ca95e3245fe90b5a1e1778a171abf6cfb8d8cfb41" name="libarchive" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="ec3c800359950f6982db7aeaced223c1e1ffbbb6c39903880132b1aed5745e43" name="libarchive-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="2c7cdb14d1b2a2ce018c2d17dfa9270ba17a32ceaf3250a690cd9f512aac5a53" name="libarchive-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="f64376861841ec8c82fc6891b46bc19364d64ac27103e47d6d0eff9bbaff4c4d" name="libarchive-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="29059e05f0be61c71f1cff0067850a47b84bff0d899752ba332a274e7c9b1aa1" name="libarchive-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="47b8d33e42a053533236549aa75887cc5c16e6c244cc484aea70a07c79c3079d" name="libarchive-devel" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="37ca36073f195d2661e27c2c127dec73fc29717a2506b478285a79fe095e357d" name="libarchive-devel" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="7e51b363fb16f0632772c09809fcaff518048c8bb5bcd576a0a3f54b3aadf5c7" name="libarchive-help" arch="noarch">
  <version epoch="0" ver="3.5.2" rel="6.oe2203sp1"/>
  <changelog author="yangcheng &lt;yagcheng87@huawei.com&gt; - 3.5.1-2" date="1634212800">- Type:CVE
- ID:CVE-2021-36976
- SUG:NA
- DESC:fix CVE-2021-36976</changelog>
  <changelog author="xingxing &lt;xingxing@huawei.com&gt; - 3.5.2-1" date="1637928000">- Upgrade to version 3.5.2</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-2" date="1648296000">- Eanable make check</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-3" date="1649505600">- fix CVE-2021-36976,CVE-2021-31566,fix fuzz test</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
</package>
<package pkgid="b64307d24250be09300ddab9a826bd1278a5df2557b5053a5e4ff8fb8be4be42" name="libarchive-help" arch="noarch">
  <version epoch="0" ver="3.5.2" rel="7.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-4" date="1656936000">- fix CVE-2022-26280</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-paetners.com&gt; - 3.5.2-5" date="1669377600">- fix CVE-2022-36227</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-paetners.com&gt; - 3.5.2-6" date="1677758400">- fix CVE-2021-36976 patch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
</package>
<package pkgid="2e2644dd114e556164a86450d1f9d2c989e4b96c328b860e509e83a31f3faf15" name="libasan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="cad41083c4fed15670a36590d49d8b61773cf3d359987f13e7ad09e7dc49a1e8" name="libasan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="e87bba3079edbe24f7bf6031fd445df76cc07771f1d1ef9f782985f70a5df66e" name="libasan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="d0c0ce49a5cf2858fd5b0525f0105712ed3ea175b47181306685f14ce25e0f9f" name="libasan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="dee887b8901ebc3ffaa4e13124d8afcc1220bf2625a32279a5627a7715ee74c2" name="libasan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="21bdd3f4f347833128ff6672d34c246bbbeedbcaa83114a4bc154d517e0bcf8d" name="libasan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="cc0e3d8cb827427a699ac2441565d577959061690114b9a93649a13739d06e0d" name="libasan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="a22b19ec191d7f759776cdd2d4cccb88dedcffa9b4556147ef082eee11610114" name="libasan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="1e2ad5baad91b5944a791f496e68e9f97fedd72e5b39bdf1d0e52607b5ea1c87" name="libasan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="fb034e900092f03832bf25ba5953c0c11ab5262c1caafd9b0457b133c4d5aafb" name="libasan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="f6e8e66f997f6c47577276ab0006dd04f0b45c7a681bebef54ff581fd697872c" name="libasan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="c908c846561f6c02967e4c10729c9b1a8d56514083f3977065171b70a3f012c2" name="libasan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="eb18a65edbeaf6a14a86218d2157b2e2e172f0f794015846e700d1d41a7762b0" name="libatf-c++" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="ed7320197b7545a3b706a0d6064cabcaa56d16885c20b18cb381c1e7598a7c6c" name="libatf-c++-devel" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="927ac13069c4c94dcb9e2d96f6fe792517f9f2079c8a75750bd3388e058c31eb" name="libatf-c" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="096085c815d7d5ccc913bec56ae64be3f8bb7271c00cf3bf92d160e6aa444d33" name="libatf-c-devel" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="d3a73771e07ee42fee9752983c7fb7ba7f0788db54398388f2e24a330c9772bf" name="libatf-sh" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="3700929fb4978d3f3544917c80a3b9b87231a9d7473802a26616edf98e944cc7" name="libatf-sh-devel" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="11893ff4a60103c15785f11444e3d6f533b98bf6bd5a0381ef752e10e045e18e" name="libatomic" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="29e7b68948ed3ddad8480e63058f1c4b748bb104a826f0cf651d60ec87d9c1f9" name="libatomic" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="609a16b3fed818fae28cda0fa14ccb2b9c730d41ac642182954634bd9e9ec314" name="libatomic" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="c6fe9ea12f7c28ac8f918b98ad2ca80cf90184bdbd4240cb9b85229c4d1efbf4" name="libatomic" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="43552b397cbdaab15c36382704793218bc4113428587c59d1dfc4283ac0ebb23" name="libatomic" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="c526d3853f519f6eba8f60bb7bf80a4fa04ceda65c03a7219d9b13b9e270da43" name="libatomic" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="77879e0d501b5bb8a6d8d8cfac152d46eab532ebad355668a6bef916bfa2a717" name="libatomic-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="a3f8d78b1718e58173fcc95f7a5e3722a4b024a88af2a2809c64e4e874963c5f" name="libatomic-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="28fc682761746be62b08bd7e4235ac12577e2c541d38cd915ceb58844382edb0" name="libatomic-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="33ba560ec178edf30da53f02ea5618407e022a5b6d1c2ce825f82b16d81b853e" name="libatomic-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="62b9ec7e62fc3008b6b350bce077a24032c8e1f22157c30ffec2e6925d4c12f3" name="libatomic-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="e3749bcc41c080b54bedd059756f9c5b53a799f12353ef3feaa57b44fd7f865a" name="libatomic-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="4608291604962fb12f5976584a96495f0aff7f8887a025e37d8669dcc0b39e8d" name="libavdevice" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="12.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
</package>
<package pkgid="e9a6ef51746461f56a0a110b45056e7801db2dbc467b27564f282b1097ab3498" name="libavdevice" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="ea468372b7b557e716844c7569217f31dbabf915bb6ac9979b396818ff7ce1d0" name="libavdevice" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="fb8f595a2328bb8c47b94310c77a93d63038580060eca173b1e8453bb212605b" name="libavdevice" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp1"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="e104cf2045329a810aced556ff22f217188e49cf055238372745357cfbcaf4e3" name="libavdevice" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="8.oe2203sp1"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
</package>
<package pkgid="b3c82d75791013a63e5d30dcf9ba744475270ade2e4303282b274099c344d505" name="libblkid" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="b41e6245a287a14931fd7fe93bfe5c421da5c211a94cee407a4a6bea3c304925" name="libblkid" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="33.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-29" date="1713787200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add provides and support enable-raw
       The current version of the kernel also supports the raw driver.
       To keep consistent with the previous version, roll back the modification.</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-30" date="1714305600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix lscpu core dump
       backport-lscpu-don-t-use-NULL-sharedmap.patch
       backport-lscpu-use-topology-maps-in-more-robust-way.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-31" date="1715083200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-hexdump-check-blocksize-when-display-data.patch
       backport-lslocks-fix-buffer-overflow.patch
       backport-last-avoid-out-of-bounds-array-access.patch
       backport-lsipc-fix-semaphore-USED-counter.patch</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.37.2-32" date="1717761600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-uuidd-fix-open-lock-state-issue.patch</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.37.2-33" date="1718712000">- Type:update
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
</package>
<package pkgid="9fff3ba1f830ffa7232128a270ac295aae636e10cae5e0064dc18abf90a39d91" name="libblockdev" arch="aarch64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="f86396e1e2cbf3287f97a9cff4cfabd74a1ea217c8ff98c3ad5590a821680ef1" name="libblockdev-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="ccc3dac4617a3910db0e25f4e39342b4bb0c04f633847ff2b4e3d673989862ac" name="libblockdev-debugsource" arch="aarch64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="a849c9658be6df7f000a53a8885a693a460538024bddf430af755ebdac37ff85" name="libblockdev-devel" arch="aarch64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="4175b74b78e4ccdb7a8dfef0573fbf47875466e7728fbe5b5640cb7819adcd0e" name="libblockdev-tools" arch="aarch64">
  <version epoch="0" ver="2.26" rel="4.oe2203sp1"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 2.26-2" date="1655294400">- Add BuildRequire make</changelog>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 2.26-3" date="1679486400">- remove require dmraid and kmod-kvdo</changelog>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
</package>
<package pkgid="e0e211bad2ca5e36ec6d5eafa818979f208c33b14b0619c8857754beea1fa41d" name="libbpf" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="01d5f5d497f624a5f25b4576a243b1ef795b3b78ea8177197f8ab4a811bd3ab8" name="libbpf" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="85a237904df085a906925bf5e71feb71611f441bdf65312acf13aef24eead565" name="libbpf" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="53d20bb91a4c3b0adfdfea25ff26d399e882ec1b93f56769c0d998e122e539ee" name="libbpf-debuginfo" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="4b3731fa7cff3c31ecdd47d422116bc085ff4e787447ebaf789acba036ba858b" name="libbpf-debuginfo" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="a53df6289bdaff218931aae78cbc018a0253ecd8b740f70b5d7b1b6860ee4582" name="libbpf-debuginfo" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="05ddd61d0a23683ecaa30566dc0100d8ce28dc044743b3ab1a040fb8f8aa1315" name="libbpf-debugsource" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="84a84a4c81d46b27f3a82594ed27e12d0a4bdbc78991cc90c2b09e14b4d0bafe" name="libbpf-debugsource" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="e2e36a8559736a30426b7410610697a9588c443185f2c6173737c6cb195906f0" name="libbpf-debugsource" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="f5ad764cb93ce18407ef9d8e392cc120bb4ed32ba031367324dd74192a8c95c0" name="libbpf-devel" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="441e16c5501a4e86ef75f75705782ba6008503d5a84f2c803bf8884c45805542" name="libbpf-devel" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="c25e35b1fe0942d866499d16a19e763eccd2a9f2d836bf42baff8430bad0b90c" name="libbpf-devel" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="13abe289fe10dae8e7f78d33c4f171174bae6ced8d6423e4765b6fc467bf2102" name="libbpf-static" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="10.oe2203sp1"/>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-10" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
</package>
<package pkgid="2cd10d54485f6a8b37690419849effcbf38e890a5a6ed36fdef94159784214e4" name="libbpf-static" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="3.oe2203sp1"/>
  <changelog author="sunsuwan &lt;sunsuwan2@huawei.com&gt; - 2:0.3-1" date="1640692800">- update libbpf from v0.1.1 to v0.3</changelog>
  <changelog author="hujiawang &lt;hujiawang1@huawei.com&gt; - 2:0.3-2" date="1661169600">- change the package name</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
</package>
<package pkgid="bad47512c858cda9935f4c767dd37762b08467785b3ef686817667a08f9f15fa" name="libbpf-static" arch="aarch64">
  <version epoch="2" ver="0.8.1" rel="9.oe2203sp1"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; - 2:0.3-3" date="1666785600">- Fix determine_ptr_size() guessing</changelog>
  <changelog author="liuxin &lt;liuxin350@huawei.com&gt; - 2:0.8.1-1" date="1667908800">- update libbpf from v0.3 to v0.8.1</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi@huawei.com&gt; -2:0.8.1-2" date="1669464000">- libbpf.spec - modify Source address</changelog>
  <changelog author="zhangmingyi&lt;zhangmingyi5@huawei.com&gt; - 2:0.8.1-3" date="1673006400">-- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                backport-libbpf-Fix-the-name-of-a-reused-map.patch
                backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch</changelog>
  <changelog author="JofDiamonds &lt;kwb0523@163.com&gt; -2:0.8.1-4" date="1677153600">- backport patches from upstream:
  backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
  backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
  backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
  backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
  backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
  backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-5" date="1683201600">- add -Werror -Wl,-z,noexecstack options</changelog>
  <changelog author="SuperCharge &lt;xiesongyang@huawei.com&gt; -2:0.8.1-6" date="1683201601">- backport patches from upstream:
  backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-7" date="1683892800">- backport patches from upstream:
  backport-libbpf-Disable-SEC-pragma-macro-on-GCC.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; -2:0.8.1-8" date="1683979200">- backport patches from upstream:
  backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
  backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
  backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-9" date="1692014400">- backport patches from upstream:
  backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
  backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch</changelog>
</package>
<package pkgid="5e8c1ea8b4eff8e0d8aaec4d5bc81252c612071958aac296ebca170d1523cbf4" name="libbson" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="4faa555580bb166a3c6c3536dd7a967567ebaed5b0a44b6c77687b2f87334c3e" name="libbson" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="b43bf8cd82edf99f9e77f84acc41096f6f7589b560e4559089b861406250f715" name="libbson" arch="aarch64">
  <version epoch="0" ver="1.27.4" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.27.4-1" date="1720699200">- Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
- libbson Fixes:
  * Fix build with Visual Studio 2013.
  * Fix parsing of colon in timezone.
  * Error on failure to init subdocument in bson_iter_visit_all.
  * Fix string handling in bson_string_new and bson_string_append.
  * Fix iteration in bson_strfreev.
  * Use aligned alloc for bson_array_builder_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Fix conversion warning with GCC 12.
  * Fixes to some format strings in trace logs.
  * Allow mongoc_buffer_t to be larger than INT_MAX.
  * Add bson_array_builder_t.
- libmongoc Fixes:
  * Fix possible crash reading malformed wire protocol message.
  * Upgraded bundled Zlib from 1.2.3 to 1.3.1
  * Close leftover connections to removed servers.
  * Fix possible crash when client is configured with empty password.
  * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
  * Fix 32-bit compile with 64-bit time_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Disable shared libmongoc targets if ENABLE_SHARED=OFF
  * Fix documentation build with Python 3.9.
  * Fix data race in mongoc_cursor_get_host.
  * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
  * Send recoveryToken in transactions when connected to a load balancer.</changelog>
</package>
<package pkgid="1cae0065bc0e38872273bda0413ce8ef2a2b01648c720a4caeeedd4bfd0bb203" name="libbson-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="6.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
</package>
<package pkgid="7082962cb7dd45805c972f4be202f951133a47b6673ee704c7dcbd9922afd77d" name="libbson-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="7.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
</package>
<package pkgid="ad8d0e26ffd886bc78eba1af70436de0c7db7c550ba237301d0fc49dc869df0a" name="libbson-devel" arch="aarch64">
  <version epoch="0" ver="1.27.4" rel="1.oe2203sp1"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.27.4-1" date="1720699200">- Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
- libbson Fixes:
  * Fix build with Visual Studio 2013.
  * Fix parsing of colon in timezone.
  * Error on failure to init subdocument in bson_iter_visit_all.
  * Fix string handling in bson_string_new and bson_string_append.
  * Fix iteration in bson_strfreev.
  * Use aligned alloc for bson_array_builder_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Fix conversion warning with GCC 12.
  * Fixes to some format strings in trace logs.
  * Allow mongoc_buffer_t to be larger than INT_MAX.
  * Add bson_array_builder_t.
- libmongoc Fixes:
  * Fix possible crash reading malformed wire protocol message.
  * Upgraded bundled Zlib from 1.2.3 to 1.3.1
  * Close leftover connections to removed servers.
  * Fix possible crash when client is configured with empty password.
  * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
  * Fix 32-bit compile with 64-bit time_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Disable shared libmongoc targets if ENABLE_SHARED=OFF
  * Fix documentation build with Python 3.9.
  * Fix data race in mongoc_cursor_get_host.
  * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
  * Send recoveryToken in transactions when connected to a load balancer.</changelog>
</package>
<package pkgid="7f246b737329076b80f6e09264acf9a05f3f0ab868f9020a2bdbcef71b9c6716" name="libcap" arch="aarch64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="f46b4bd870a59c869b10af173f0a65c9b2821102bcd3abf5fb606012fd32dbea" name="libcap-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="8550b1dc7519c053947fffb346e5997f4885fd1acf0bbe3e7a981ed1a932023d" name="libcap-debugsource" arch="aarch64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="2ad2f2aa9559b851a44d168cd45cc0c017996123dac92dc3eeb01f14a2edc16c" name="libcap-devel" arch="aarch64">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="f21b23bea36cec6e0592967af145790135c7b7fb8aaa96e2e5a78f0e30f3163c" name="libcap-help" arch="noarch">
  <version epoch="0" ver="2.61" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.32-3" date="1636372800">- capsh better error handling for integer parsing
- setcap clean up error handling of the ns rootid argument</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-1" date="1637841600">- update to 2.61</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-2" date="1661601600">- fix syntax error in DEBUG protected setcap.c code</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-3" date="1665576000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.61-4" date="1667304000">- backport upstream patch</changelog>
  <changelog author="ExtinctFire &lt;shenyining_00@126.com&gt; - 2.61-5" date="1685534400">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
</package>
<package pkgid="83834a076538d1aab98984c431086b8c196371abab388a29ab499694fff31d72" name="libcephfs-devel" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="f0c8ac1b5ec4a4bb982c0a6c2c56124d20923e98689b452f838e22f13f85dc34" name="libcephfs-devel" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="02158141ce2423e9da520693a21ffad98a1f6e642d0242db95d4820dba961355" name="libcephfs-devel" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="babadae9ee3098379aa05103c36012e0818bb2b88351fbc97550d8b0fdd884a8" name="libcephfs2" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="8d4d13d19b48079a47830bf23e52aafdfc8d0fd9def609e959e30885d39236b4" name="libcephfs2" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="45e8a23df1709a350a682c253547b7904d94db2a67e47772ba74b4364d05bb77" name="libcephfs2" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="6694e5b4c3ef253e491b3037f475fd82659f53d99e6a5e582b694a6785b1687a" name="libcephsqlite" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="1af886ba6f6aa256e129c10f7d6bd5c730245f14ce39b0d3882dccdd6c51fe18" name="libcephsqlite" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="fbe3c117d96aa9f9329f565b835e5161a1982672af10146608bb567db89022a7" name="libcephsqlite" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="b86358d8e8c09d19486013a1019a608e0735205b27ee6224767bc3f0881be07d" name="libcephsqlite-devel" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="14.oe2203sp1"/>
  <changelog author="yangxiaoliang &lt;yangxiaoliang07@163.com&gt; - 2:16.2.7-5" date="1661428800">- fix ceph-volume lvm list calls many times pvs</changelog>
  <changelog author="luo rixin &lt;luorixin@huawei.com&gt; - 2:16.2.7-6" date="1664366400">- fix osd read superblock error</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2:16.2.7-7" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-8" date="1668081600">- rename sw64 patch and reduce compilation threads</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-9" date="1668427200">- fix CVE-2022-0670</changelog>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
</package>
<package pkgid="8a401dc20c0eb00cc1f2d24a0d0f80aae6fd022b7480ff6e0c8483ebfce6e2e3" name="libcephsqlite-devel" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="19.oe2203sp1"/>
  <changelog author="wangzengliang &lt;wangzengliang1@huawei.com&gt; - 2:16.2.7-10" date="1668513600">- keep the ceph.spec align with native community</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
</package>
<package pkgid="b62513f11dd02ed3d6c980232b3ee13d5e5d8b8513db4186853c5ba64458effc" name="libcephsqlite-devel" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp1"/>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1687262400">- fix error when uninstall cephadm</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 2:16.2.7-17" date="1691668800">- fix sw_64 build error</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-18" date="1697716800">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-19" date="1697716801">- fix CVE-2023-43040</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="fwind43 &lt;fwind43@163.com&gt; - 2:16.2.7-21" date="1716897600">- fix error for cephfs subvolume</changelog>
</package>
<package pkgid="407d2ee8f0f2b1101e4abdf16471f4c0d72d90cdee3395b7776d499f6460a3fa" name="libcgroup" arch="aarch64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="5f10c0ea8f036e37d0621dc78d2fe2a2384ee0c5c5c01574e5d6cb72ae67e7b9" name="libcgroup-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="6c36e8ef2aea623054900baa78424b3972e6161e69d984629ce3d723bfc662cb" name="libcgroup-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="8e9d5429e44c98679037c0c6c0e24b0cce2f3a1833612a1b605dad41983ea97e" name="libcgroup-devel" arch="aarch64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="49e2ba8f59da799fd70bad88335db3dff9a397d7272d2f3ce4bfd9361d1ccc85" name="libcgroup-help" arch="aarch64">
  <version epoch="0" ver="2.0.3" rel="1.oe2203sp1"/>
  <changelog author="hanchao &lt;hanchao47@huawei.com&gt; - 2.0.3-1" date="1675944000">- Type: upgrade
- Id:NA
- SUG:NA
- DESC:update release version to v2.0.3</changelog>
</package>
<package pkgid="f04e810da6429fd42b3036688b20547d5c1825da259021e1eab1a092cd8d0d5f" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="5eb23b1542e3adb2423803e8b5219f17d0ade07401503fe66010baac4908e10f" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="93a3c1109763f63adefd80208c56aa7a76d499b4c001e069cbdd7239923cd88b" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="61b9ad6e55b6b16bcf9a7a841561cf45d5cc2ac32b4f5ec3dafba2c801f05e74" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="af7bb38eb16157dda2f43f02db0bd40ad2cde7885ca706da55cb620ae0e5336c" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="6c2df6eb54d2c3dcb7e1ac415c49084469b027d6547fb058ab3cf73bc5ed80dc" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="b292723511650576ca8f20508ef0353f64ece527798be753fa18a46cc732728f" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="d05197a31156a329e0876aecd9d1359da323faf3ec12be00d0e9c50488a216c3" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="2e5a50d23b7a8bf3dcfc4be4410c75638e950a9b71cf5704bb7dc7acd59ce893" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="c958f70fb47adc904c55e8fe558595ff1bfd20e8009108254aaa5a7d26ef9f3c" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="13d3570b819d0407f5fe115454c36901313920e2775bb3c2441c34748cfe170b" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="9930ac83e9558754a5471cbf026d9668ee79dbe5fd479e8184415902b0d2409d" name="libcurl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="33a1e9f890c528570be8aa5b8287a8e26bc46355de69cf8700ca3635205b35e9" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="14.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-5" date="1651838400">- Type:cves
- CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
- SUG:NA
- DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
</package>
<package pkgid="b32fc6f20455c5b18b8c8875f8fb0b5e0b17d4f7947d03e844d4c6e5ce742836" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="15.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-6" date="1652788800">- Type:cves
- CVE:CVE-2022-27781 CVE-2022-27782
- SUG:NA
- DESC:fix CVE-2022-27781 CVE-2022-27782</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
</package>
<package pkgid="8c807d3025f4d4120021049cd53148ebbb1f73651c4e46a028e73c692d3210ce" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="16.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-7" date="1656504000">- Type:cves
- CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
- SUG:NA
- DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
</package>
<package pkgid="22aa17a61eeeeebc28ddf18c90b412836852ec3f6007b934993bf5983e41ad84" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="17.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-8" date="1657022400">- Type:cves
- CVE:CVE-2022-32207
- SUG:NA
- DESC:fix CVE-2022-32207 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-9" date="1658750400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build error when add --disable-http-auth configure option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
</package>
<package pkgid="d80c3e34627f7bf51cc35d193a423dff93691a844b6a0162e911ff0dfc20aed6" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="19.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-10" date="1662033600">- Type:cves
- CVE:CVE-2022-35252
- SUG:NA
- DESC:fix CVE-2022-35252</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
</package>
<package pkgid="36f189b46166b815bdc18eeae3cf6b1ab0e03ba6cb5dcb8c69b78c92707e6470" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="20.oe2203sp1"/>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 7.79.1-11" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-12" date="1666872000">- Type:cves
- CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
- SUG:NA
- DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-13" date="1671710400">- Type:cves
- CVE:CVE-2022-43551 CVE-2022-43552
- SUG:NA
- DESC:fix CVE-2022-43551 CVE-2022-43552</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
</package>
<package pkgid="df40e0555943fc20a70ec3816180a6a21af2357703851d6c6e45db66d9839756" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="23.oe2203sp1"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-14" date="1676721600">- Type:cves
- CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
- SUG:NA
- DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
</package>
<package pkgid="99d587f67190f73ad3dd27d0ce8ea145537a1b2c6f65fe90036b50240920977e" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="24.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-15" date="1679486400">- Type:cves
- CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
- SUG:NA
- DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
</package>
<package pkgid="041a046a9e0abd1e10a5a4b812495ee551a0fe448b03f5e8fdc762b9eea0dda1" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="25.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7.79.1-16" date="1681905600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix build error when user don't use glibc</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-17" date="1684929600">- Type:CVE
- CVE:CVE-2023-28321,CVE-2023-28322
- SUG:NA
- DESC:fix CVE-2023-28321,CVE-2023-28322</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
</package>
<package pkgid="a920f9eed9e69df834ebd4266cf05e1fe7b8baf1874e15153c3f0d347fe074b5" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="27.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-18" date="1686225600">- Type:CVE
- CVE:CVE-2023-28320
- SUG:NA
- DESC:fix CVE-2023-28320</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
</package>
<package pkgid="d05e3373188e0dddb6683c69303785a9cf7918c41d0b42fb8146af02897a90e7" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="28.oe2203sp1"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-19" date="1686398400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable valgrind in tests</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-20" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide sensitive info in cmdline when ps</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-21" date="1688385600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix double-free when using https with tunneling proxy</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-22" date="1688990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some testcases</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-23" date="1689854400">- Type:CVE
- CVE:CVE-2023-32001
- SUG:NA
- DESC:fix CVE-2023-32001</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
</package>
<package pkgid="9ddee6c7b16773a20e58d3de380975cffb074a5ed89aa466269cb17b1232f762" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="6a5ab6d3afdd1e85131db602f188e52fbb2b7c6b5ff996aa4a9fb28427d2cda5" name="libdnet" arch="aarch64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="e40cd36d978f00c19aa98c1e7b102bfd368853396aadd424888add0e2e3ae1fa" name="libdnet-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="98b5b4be15367369a0aae8b7e49825c149441ed4fc0872c8cbad7929735d843d" name="libdnet-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="439ec346b33d32cf86fedf5ce74c912bbefcf65c20bd452591ca0116682d98f5" name="libdnet-devel" arch="aarch64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="8fd2695111ac97fdce90eaaeec5f135f26599f817d02f536b76cec4002721564" name="libdnet-help" arch="noarch">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="7605d09e11bdcfee6ccfd5a0255b6ce5abca4dbc4566f7a9125d50cd05f4e5fa" name="libdnet-progs" arch="aarch64">
  <version epoch="0" ver="1.14" rel="4.oe2203sp1"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-2" date="1667304000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix Potential Null Pointer Dereference</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.14-3" date="1668772800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes '&lt; version' in spec</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.14-4" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
</package>
<package pkgid="38366b0e0852634cba0ecb07cf2b7979d383a260c416ffeaf76ebab802a6ffea" name="libdnf" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="10.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.69.0-9" date="1718366400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix history rollback cmd not meet the expectation
       Fix memory leak in subject-py</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 0.69.0-10" date="1721217600">- libdnf:Fix countme bucket calculation</changelog>
</package>
<package pkgid="003d2820c01221c3edc583f1341af6b5d5f4ba93d25350b449ec9edea5686122" name="libdnf" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="64bb8b313a36ac2ff7bf05bfe6ad603ea2c7892563a04d6dabd156b23172d9ed" name="libdnf" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="77640fbf871051899158725e9085c233c67e3ad0ffc30092572c8a45389186a8" name="libdnf" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="052373376cf3a83347f1304a90865ae4ca34c1f36d7a7a63d1d30579d2850dbd" name="libdnf" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="048993047b433761dbe529fc787598f378429abae8ea8f525fdfeb2fedd922b0" name="libdnf" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="485a2a2473a9a239b92b0e31367aaa33807a907d6c5b0ca69549c4cf3bc905bd" name="libdnf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="10.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.69.0-9" date="1718366400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix history rollback cmd not meet the expectation
       Fix memory leak in subject-py</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 0.69.0-10" date="1721217600">- libdnf:Fix countme bucket calculation</changelog>
</package>
<package pkgid="bb267ad86f49b8b9ca8f34ff2bbc4f2d575650d0f2c8e983ce1c4f1a3f02d9fd" name="libdnf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="a42187a6e655ab0a6f0b3f72150350f863dd8bc8fb136a384b6b88db3b64c8ff" name="libdnf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="1f204e12b1003470c8ec7232c596a2aded74c33f0c4dfcca2ed38ad1e32844a5" name="libdnf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="894428451d458bf40d387556622599ad949090f6f4867d77b7814e122b46a2f9" name="libdnf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="7f4c317ec3a35dfd3dbee8e442365f57b3457576bc766fba0eccc7b344788d60" name="libdnf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="9b2dbc757455f8c5678514954185d3d29c3cac9d067f65f07dcbf9c743cb955e" name="libdnf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="10.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.69.0-9" date="1718366400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix history rollback cmd not meet the expectation
       Fix memory leak in subject-py</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 0.69.0-10" date="1721217600">- libdnf:Fix countme bucket calculation</changelog>
</package>
<package pkgid="0a8945fbd0003357b56b6e3a06c6a888f3eace09adf562c3e910bf6d18a29303" name="libdnf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="35f84628e36d682c1a449b485769536e52202b449e527a588c842fe507e306a3" name="libdnf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="f680a34e92627338981754f173d5e29a52af7c120af9ad9d895e883d3fd2b7ac" name="libdnf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="cead0d215b75355b1755f3f05272c482b8a99341aa3d354b84bfec3587c00e1b" name="libdnf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="b296410b40867ce59a38bcbc6277ce4b3992d9595aa696ce1a0f4abe8962335b" name="libdnf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="7294f985f18eef9b036c8b0cd78e48252a3228581ed9aefb585d3445880ae6e5" name="libdnf-devel" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="10.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 0.69.0-9" date="1718366400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix history rollback cmd not meet the expectation
       Fix memory leak in subject-py</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 0.69.0-10" date="1721217600">- libdnf:Fix countme bucket calculation</changelog>
</package>
<package pkgid="fed597fbef8a5b7e6aeb1b764dc1b81e06224ab94bc9f3b514b99c98a8bf5f83" name="libdnf-devel" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="4.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 0.48.0-2" date="1623153600">- Type:CVE
- ID:CVE-2021-3445
- SUG:NA
- DESC:fix CVE-2021-3445</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
</package>
<package pkgid="4c4f3a610ab7dab3a0c6884048298bd9a5789e5dd5050d8ccbc8f377bb72f56c" name="libdnf-devel" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="5.oe2203sp1"/>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 0.48.0-3" date="1626350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dnf and libdnf upgrade downgrade together</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
</package>
<package pkgid="1f0952e9f35a86c5026684069fc95fbc7447c41ab92351af3466fde30e0720cb" name="libdnf-devel" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="6.oe2203sp1"/>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-1" date="1640433600">- DESC:upgrade to libdnf-0.65.0</changelog>
  <changelog author="hanhui &lt;hanhui15@huawei.com&gt; - 0.65.0-2" date="1640692800">- DESC:fix libdnf upgrade failed</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
</package>
<package pkgid="402d0a45c6f1fca83ecb2b04b9814f3a4c5318e37b9133c85ec3ec16523f0e43" name="libdnf-devel" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="7.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
</package>
<package pkgid="fa936ec0d7c484d280095d96b227a950f7773963d0ade724772b4f1dd7b162c6" name="libdnf-devel" arch="aarch64">
  <version epoch="0" ver="0.69.0" rel="8.oe2203sp1"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.65.0-3" date="1663675200">- DESC:backport patches fix listing a repository without cpeid</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-1" date="1667649600">- DES:Update libdnf to 0.69.0</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-2" date="1670587200">- DESC:backport patch to ensure reldep is from the same sack</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-3" date="1672920000">- DESC:add loongarch</changelog>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.69.0-4" date="1682078400">- DESC:add check after malloc allocation</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-5" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:fix libdnf no downgrade when downgrade dnf</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.69.0-6" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disconnect monitors in `dnf_repo_loader_finalize()`</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 0.69.0-7" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
              Fix utimes error message in dnf-repo
              Do not download repository if our local cache is up to date in dnf-repo
              python bindings:Load all modules with RTLD_GLOBAL</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.69.0-8" date="1705320000">- Modify loongarch64 patch use all arch</changelog>
</package>
<package pkgid="9aa4f2f4bc59541206d7a076c67c061a3ca79c3463c7350c5fd711b329ef00b9" name="libdwarf" arch="aarch64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="ca7fa34e3c3afbff477d34b0944fc26836dce7101012082c24a44c7e2aedd404" name="libdwarf-debuginfo" arch="aarch64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="0f1c2cb9a1f5a58f32536b61152c3cdafbe883073c6551384f198e1fc90f4487" name="libdwarf-debugsource" arch="aarch64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="7a5dbe2693025505855265c098c7c857c70046bea81b41e4ab5dc5f35e976e70" name="libdwarf-devel" arch="aarch64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="e3aa82ee523ae80ca0c2580c967df373a7d2aeeac94001eb82c3f7603ff97775" name="libdwarf-help" arch="noarch">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="fd94dca601591f9c2fdd242e744a73caf92ea7b863446a4aac87e76d8da72743" name="libdwarf-tools" arch="aarch64">
  <version epoch="1" ver="0.9.1" rel="1.oe2203sp1"/>
  <changelog author="panys&lt;panyanshuang@nati-gba.cn&gt; - 20210528-1" date="1658836800">- upgrade to version 20210528</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 0.7.0-1" date="1686830400">- Update to 0.7.0</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.9.1-1" date="1711368000">- Update to 0.9.1 and fix CVE-2024-2002</changelog>
</package>
<package pkgid="dbf2a8755aed05781f2783ef28214e42a3c0c73af9e4e1d5f31aebdc7327d9d5" name="libexif" arch="aarch64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="7b3e482893c34b158cbdc08123bcc2d9ae1a7e38bfa8a03b9f1f375d8be70845" name="libexif-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="ecc332fd7bc69ae3a2d75ee79c770029ada61376b3fbc232e10d899ffe61f6d7" name="libexif-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="15461995a95f9b615e907d4c576d9b56239fdbb522311bf5cd9d47fe34ef0162" name="libexif-devel" arch="aarch64">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="83fa4ee030f847183256df11a5e930ea1f5d9fb375523d73c098856b8fc05fa1" name="libexif-help" arch="noarch">
  <version epoch="0" ver="0.6.22" rel="5.oe2203sp1"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 0.6.22-3" date="1666094400">- fix fuzz test error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-4" date="1692878400">- fix typo in changelog</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.6.22-5" date="1705320000">- fix CVE-2020-0452</changelog>
</package>
<package pkgid="bbdd1e110c835ca6901e8b7f46d78684237d892c82ef673aa28c1794a226758c" name="libfastjson" arch="aarch64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="0e12ffe51f3567db8cbbc23bda6f69cd6ad791be00c7b59d29be3b1500099c80" name="libfastjson-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="d9a6bebd3ab0f3a420da0eafeeb8d64c9cfabb4da57c8537af98428c304ceda1" name="libfastjson-debugsource" arch="aarch64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="8b6236cb63a7804f67c075a8f1042a8d0da63b0928fbc0187d99e34ee84f169f" name="libfastjson-devel" arch="aarch64">
  <version epoch="0" ver="0.99.9" rel="3.oe2203sp1"/>
  <changelog author="panxiaohe&lt;panxiaohe@huawei.com&gt; - 0.99.9-1" date="1638273600">- update to 0.99.9</changelog>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 0.99.9-2" date="1662638400">- fix obsoletes in spec</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.99.9-3" date="1680004800">- fix CVE-2020-12762</changelog>
</package>
<package pkgid="25d139c98a474f2fd82624aa88543154d5242815be6568d10752a3fa16389e2e" name="libfdisk" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="bb181ecfc6dc2fedabf13c64aae0881bbdf9c8da17ea97d5b58ffee3c383f243" name="libfdisk" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="33.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-29" date="1713787200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add provides and support enable-raw
       The current version of the kernel also supports the raw driver.
       To keep consistent with the previous version, roll back the modification.</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-30" date="1714305600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix lscpu core dump
       backport-lscpu-don-t-use-NULL-sharedmap.patch
       backport-lscpu-use-topology-maps-in-more-robust-way.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-31" date="1715083200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-hexdump-check-blocksize-when-display-data.patch
       backport-lslocks-fix-buffer-overflow.patch
       backport-last-avoid-out-of-bounds-array-access.patch
       backport-lsipc-fix-semaphore-USED-counter.patch</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.37.2-32" date="1717761600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-uuidd-fix-open-lock-state-issue.patch</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.37.2-33" date="1718712000">- Type:update
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
</package>
<package pkgid="81c55df4cb615d6b0a9bad8d5f7e00ca77e335a198f36326fc6e3b0532211a3e" name="libgcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="0fd2cea31c3196e73ed47b7a4fd9f63fce14008b048e76b6fdbda99a15eede0c" name="libgcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="9e62bd7a3b12400b029c5e7359c7329ad43ce6dbdee57b12c5aa0b203cada1d0" name="libgcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="2062c38a49c4af28e08c527495b412a5d6036444b828ee02ca4a2bd0ab3cf4c1" name="libgcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="6b8d41173f373b683aaf5d53e6d780726c6dbb4b0618b227f2de2b976a1aba2c" name="libgcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="e280300e4749d49d2dce315369b6dd2a34e22b2783eb210575ff4600389a42ef" name="libgcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7f8d5d7aede246eb48f1c61e7b525d66c704c047283854ba3136ed75317356da" name="libgccjit" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="e58b2dc8eeb4bd243d1c32e80edfbda5a9cf74052c53c56105a4571cb0dbb87f" name="libgccjit" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="490c380db063048d60116b3f7f294dae14a4c4ac8d3b7dcecc809355bccd0bb4" name="libgccjit" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="77442ef2d234f33b5042c17b8c47a5d81b3a97d9c0a3e79be3b20e5290b27a15" name="libgccjit" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="806edbf47676b9255144c86431ffc04f0c9cc0ec507adf3b9a0d9a271bb4eedc" name="libgccjit" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="311a073c07d576bee8e127716af0609c95a02c41a7f0a30108f4aa1e227aaeb0" name="libgccjit" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="36143ff02501c5fb7a8badbecbf9a1d4c613995f68d8c602d1d3266f628e3b12" name="libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="069a6092f109d8dbc738f89451bf514f4e1ba1f5fff34345d1449a3f3d5c5889" name="libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="35e2d1a8532595b133569326317d5b5859ef55707eec094c0ffa9fcda93e4cfa" name="libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="29714b34df7e1ff0d30cc3108e3ac1973067ae1ac8b4b46fc60a92ebfaff5bfb" name="libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="d941ca3303a4b525ac13375f7c45ebe36312d01e0ab1f9aa61b6c81e8a7a6233" name="libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="27f1cb207b50b90590af976002d70cee6e012f00aa3d611d9793c66f9d95e38f" name="libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="eb9cf6ed4eb989f4a3e2550dcdb359c78618bd0e0f48965284cb318844d97d87" name="libgfapi-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="ff69b90d92402d2c6586ac8bb74fa52c56d9be0b01a407e0306871193c2f7498" name="libgfapi-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="9aab58b381589f73e5e35164a9b0a0386fecb320196daaba2b159015e12b75b3" name="libgfapi0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="44ac22a1597a57e6c94d7dfd97e8dc030cd50598a34a5e4d263343892eeee27c" name="libgfapi0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="6350c16e5d41b9f20a167bb05e826dfd6e33703ae92cbcc6cc41b31f80f664ac" name="libgfchangelog-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="6a87f2c1e3e93c2d799806058333f09eb67f3844183798bf13895741a3425853" name="libgfchangelog-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="206a16d7de79d49ae5b00cddc1ad97b3c25e26b25f1e2f9d19842548a269a018" name="libgfchangelog0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="45501dbc61af854ee9a2bbac30af6fff559aa365aed7e42fb32fe57e0b8dba90" name="libgfchangelog0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="d4dc8b4b01095b9080788396e144e8961c36b2da95aebb6122f914b7510b4644" name="libgfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="778f06c055ed5118f20f58264c716fe0681f77271ea289dfe1f128fcfa9c0404" name="libgfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="ecaf5813b594fa7808537a89261af3948a35cf90669fb6378c96ad7d2b64f6ac" name="libgfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="e4488bf2c59b4060b1528f9514f987cb4793ac29e57f01168446f36174505f6a" name="libgfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="c63c8e9043218fd83390e028675139baa716d6a0b0f67e4948e25e53fa8380e9" name="libgfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="bc55e80d722077e555eb4a2540af2f2705e0aa8c9f02d622431d0410331b7ddf" name="libgfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="f40483c98bc49596af74d3f55cd07a05115127e97d322313c43e5412a5891b0c" name="libgfortran-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="af9ffca806efae4381fe99d7a14c14e08eae5cbb1d50b99d885144359ef43bb3" name="libgfortran-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="62d5170c4b118514a29d0657d79d55f32c025239374ef422864a673a34339ead" name="libgfortran-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="0ffd25c27b28ac065e4f8c46b5057cf93266b128ab7e96f1da6b4f850335c098" name="libgfortran-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="25979808b37c6868c197f80a59f6e180fd6b3b30affa9afaef125c263a900689" name="libgfortran-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="e0e816af6baef82e050b199d831bb30b56b084d2835bb88c75d03dfc8915e8e4" name="libgfortran-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7ed857210621d2016b0cc4a07c108301d6e6f3a4b7f2f4aea1988f486afe90f0" name="libgfrpc-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="f979479fdf892d60ac0033b5674cba0d28ffed189f47daa223017332c1fef727" name="libgfrpc-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="6edf71867b953c95c54b98d61523579e85ae659cce70c3865fd09207b92249fd" name="libgfrpc0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="d3f8a03540dc3e73ef6fdf68683abc904307b7d190d4f9c74c7179e9a07714e1" name="libgfrpc0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="58abe8dd2134624c932d4d9dc9a5fb8cc4a4d7f3df4f208b764b57eff743d608" name="libgfxdr-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="593a3807d2797c56281ac343d975cf07f5bf6e20a0861c475b4fb823779ef101" name="libgfxdr-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="274a7c725bcdd35cf52259dceaf41c7db2ec9b325abf9f2db210d6a4a414539f" name="libgfxdr0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="93bac6f1adb4f85f7ebcd3511161481a2b6f0b5b206f2683482c76dd04eaf292" name="libgfxdr0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="1999010819e067899cfca2ab826d3e0abc12f970cf66e0665c130525435a02d5" name="libgit2" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="b028632fffeab36e522e350bef7aaa15ee66728ded6c6de201e16eec5d737cac" name="libgit2" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="8733c01fcbcb0383abba9749fb5e9b80321b396465f28a41c853f567feea2e6e" name="libgit2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="84c41a7363c803349aa81beebd9e8f5bcc6f4b3aad5d27d60a67146a02ffa85b" name="libgit2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="85bfd152d05fc4195d16a4ec814c24462ad7e3b0f4b4f05c9917359d6ccabb15" name="libgit2-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="4d28e3530479c37b76caac56257ab74be30f96c5ce9318592c53e0a223e10020" name="libgit2-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="9b76348679797bc62285587999ddf4ee1cc39b1d8610355fc1cbe5b4aa194650" name="libgit2-devel" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="2.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
</package>
<package pkgid="3e780f460c1c31c8971d4219207d536cfefe4feb645bbe069a04778389269e78" name="libgit2-devel" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="3.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 0.27.8-5" date="1652443200">- Remove error-prone, redundant test</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 1.3.2-1" date="1658750400">- Upgrade 1.3.2</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.2-2" date="1702555200">- Fix CVE-2023-22742</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.3.2-3" date="1707307200">- Fix CVE-2024-24577</changelog>
</package>
<package pkgid="a540303761a777b8847522c1f3f6ae0b2f76fc450255bac629b052d6d717fb0f" name="libglusterd0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="c5cd0aed56a45a81fba64fe9f9fece5e671eed431640d38028857cdf02cc7254" name="libglusterd0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="2f806cd844c8a495f2963505f1756b567b7394fccf93ea1ea7b8f46b76610f6f" name="libglusterfs-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="0e0f18cfec07fe4ff83c4699ba31684cc4308c218e7da63925ee12042234bdcf" name="libglusterfs-devel" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="107d9a968e7e2ad4a327393e4dc7d17ac2e357ef336b3f72a5b5fa21920a5ed4" name="libglusterfs0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="8.oe2203sp1"/>
  <changelog author="chenyanpanHW &lt;chenyanpan@huawei.com&gt; - 7.6-2" date="1627646400">- DESC: delete -Sgit from 
%setup       -q



/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


/usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
/usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

, and delete BuildRequires git</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-1" date="1638360000">- Update to glusterfs-10.0-1</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-2" date="1643198400">- Remove unnecessary subpackages ganesha and regression-test</changelog>
  <changelog author="Wenchao Hao &lt;haowenchao@huawei.com&gt; - 10.0-3" date="1643198401">- Change gluster-server "Requires" from pyxattr to python3-pyxattr</changelog>
  <changelog author="imxcc &lt;xingchaochao@huawei.com&gt; - 10.0-4" date="1643371200">- tcmalloc issues</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
</package>
<package pkgid="bf56870eb861204e384a8d66b9a9156819aa5d0f99166518eb9a40e6116d3e5c" name="libglusterfs0" arch="aarch64">
  <version epoch="0" ver="10.0" rel="9.oe2203sp1"/>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-5" date="1662552000">- SC2081: [ .. ] can't match globs. Use [[ .. ]] or grep.</changelog>
  <changelog author="zhanchengbin &lt;zhanchengbin1@huawei.com&gt; - 10.0-6" date="1666094400">- license: fix license error.</changelog>
  <changelog author="lihaoxiang &lt;lihaoxiang9@huawei.com&gt; - 10.0-7" date="1675771200">- fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-8" date="1678363200">- fix CVE-2023-26253</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 10.0-9" date="1710244800">- fix CVE-2022-48340</changelog>
</package>
<package pkgid="8a58c01f550067d76b7c5fd8cdc294c567a9d1f3a784492a23d2edb7b0504d53" name="libgomp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="3b72099f213ef1062ab26233536042e11de77875d49d55b56581b1f28c2040f3" name="libgomp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="2fe80a771dfa32ff2d54d50a1ad683f78bf174d573984a3b49e9f6bbe51a8293" name="libgomp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="651f1ee8963805ae9f3614a180ad8425b5dbc110f7cb892db27c1a48eec72a3f" name="libgomp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="13f53220dcf11e8bd7791033d8ebb79a5e217877e4ab5a1cb25b0a378f6711aa" name="libgomp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="d562291492c48dc1e2e162c8d762285a446265669f8828c4e66576700550aa1b" name="libgomp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="eea5364a157c184852d1476974b51edf1fbc84c58f58c05385690507de2bf17f" name="libgsf" arch="aarch64">
  <version epoch="0" ver="1.14.47" rel="2.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.14.47-2" date="1728043200">- fix CVE-2024-36474, CVE-2024-42415</changelog>
</package>
<package pkgid="4c2206ca76243e328b4e22d4cb4bed926f0ed3769436724cde083ab85ba49d5a" name="libgsf-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.47" rel="2.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.14.47-2" date="1728043200">- fix CVE-2024-36474, CVE-2024-42415</changelog>
</package>
<package pkgid="9aff460e35e335e3adf0a4788071bb933a6462bca48e980bbb4a3b24dab41b92" name="libgsf-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.47" rel="2.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.14.47-2" date="1728043200">- fix CVE-2024-36474, CVE-2024-42415</changelog>
</package>
<package pkgid="18a6f213f704ce2dff0208448df0005d100689718f67df9e75d6abbe3bdfee15" name="libgsf-devel" arch="aarch64">
  <version epoch="0" ver="1.14.47" rel="2.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.14.47-2" date="1728043200">- fix CVE-2024-36474, CVE-2024-42415</changelog>
</package>
<package pkgid="ed6a9358b76f9de8146a4cbd9b4d624e4cb0e64dbb48311057482c57983125c9" name="libgsf-help" arch="aarch64">
  <version epoch="0" ver="1.14.47" rel="2.oe2203sp1"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.14.47-2" date="1728043200">- fix CVE-2024-36474, CVE-2024-42415</changelog>
</package>
<package pkgid="81d68c21a13e8bef91098eea0053894af58eba049a69067577e45c3a05194bc4" name="libhdfs" arch="aarch64">
  <version epoch="0" ver="3.1.4" rel="5.oe2203sp1"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.1.4-5" date="1729598400">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="92bf6f838e9f2ad8ef8b6c15cf18d7c92e132ad78d22cb0094306bbbb00524c8" name="libicu" arch="aarch64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="065c5bd2c0fea0ec53580b44db3827735fa696668f54cced03dbfb30b6c0a627" name="libicu-devel" arch="aarch64">
  <version epoch="0" ver="72.1" rel="6.oe2203sp1"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 72.1-1" date="1668513600">- update to icu4c-72.1</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 72.1-2" date="1668772800">- add loongarch64 support</changelog>
  <changelog author="wuzx &lt;wuzx1226@qq.com&gt; - 72.1-3" date="1669032000">- Add sw64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-4" date="1669032001">- Optimize the patch for add loongarch64 architecture</changelog>
  <changelog author="zhouwenpei&lt;zhouwenpei1@h-partners.com&gt; - 72.1-5" date="1671105600">- delete redundant files</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-6" date="1686657600">- delete taboo words</changelog>
</package>
<package pkgid="7bce64f17d6abd09e2bf58d192c9233500ed655ee3ff3f7d0aa417e5b6e52c0f" name="libitm" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="9c5191654dff3abf9f49c40f4aa9aace24ea592018d3913a90d0352218a5b07f" name="libitm" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="118089af0e2b0274bbe1132228477f2d632cb92eafdd2b120ba75eb7990db421" name="libitm" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="206cda36b54eea4afbd6662eaeb694cd9f332c7045f86c5e1b7c63f18a9d8424" name="libitm" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="29500e302375acef8c3b3dc219c97c139899629d4785dad365b2e40d60c23fb6" name="libitm" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="d026ea333f0dbd777f7343dbbb3d9f19b6ab846c566f08a2e3b902948281e382" name="libitm" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="d830c1b2e733377a48fcfe6ef0b3a1a4a5cc17d0968d4cddfe883e754006e0b8" name="libitm-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="94c048864cb6381a05cb9eab4d0cc9bbef0fec822b6e81253317577f4b459a4a" name="libitm-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="8005d6a7ac498353a533c99e663bbc0a95e02bc3c86f9366f795ac4d6017a638" name="libitm-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="43ff5ae8fb37cab9e6fbd13134709cacb732743dbc6179c965a42416c6fd05e8" name="libitm-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="625c934791f48a41c220945a1a63260f2d524c726d0b8dd20b794eea86f9c59d" name="libitm-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="6ae6b9cde5897b395cb2d3e89e2d667d5d3b21dabae8ae7eff12b0332f357823" name="libitm-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="7939107d528e47944c8a254c44a11996b9499e3839601c406c738acfcd084033" name="libitm-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="f85fa5d3fb96aa96caf80bc64358fdac90e84db2a6107a541b53dd34de11f5a5" name="libitm-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="7b9826faf6edd90213688ab744cff99d9ab340ad9e4b4cecf3eabf94e90d7aa1" name="libitm-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="7804baf185da77efa9ddacbde5a27bc625a9401ca154603c32ab316facfd448f" name="libitm-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="ac61fdd782858c746a885c27e4d1fb3f3d195b2eed0304124ea4a947edc32afa" name="libitm-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="bd78555c309fc3c688ef7c88ea466b5501ec903662fef5ab2ec30185a43edecc" name="libitm-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="1ec7adaccc5c0afa5502140e1726b7029d06065f44c34e05b5f513f7d3cf7fb9" name="libkae" arch="aarch64">
  <version epoch="0" ver="1.2.10" rel="5.oe2203sp1"/>
  <changelog author="jinbinhua &lt;jinbinhua@huawei.com&gt; 1.2.7-1" date="1578398400">- First Spec Version Include kunpeng_engine Code</changelog>
  <changelog author="catastrowings &lt;jianghuhao1994@163.com&gt; 1.2.10-2" date="1583236800">- openEuler init</changelog>
  <changelog author="zhangtao &lt;zhangtao221@huawei.com&gt; 1.2.10-3" date="1584273600">- Specify aarch64 compilation</changelog>
  <changelog author="lingsheng &lt;lingsheng@huawei.com&gt; 1.2.10-4" date="1595937600">- Check glibc version to avoid redefine gettid()</changelog>
  <changelog author="caodongxia &lt;caodongxia@huawei.com&gt; 1.2.10-5" date="1628769600">- Fix pthread_yield is deprecated</changelog>
</package>
<package pkgid="6f8bf0a99a4b07a423be21369a2478fec2d31a0c968f5a6a3f83e0fb7a990ce7" name="libkcapi" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="907f2fca88ec25809fa1ba2e35e5aa63c9d44a91ccf6af59a581e151ea14cae6" name="libkcapi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="02fab7976bbf04c5de33938d00bb84ed59a8465185bc99c76e97800d358c9f5a" name="libkcapi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="55caf2b353a8bd70f7c7e65f278746f37e030ae98289dd8b4d8413bbb5c2d5cf" name="libkcapi-devel" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="51676f0f4f5ea575ed8920fc1e7d54cc0e685ad1ad8d81ba619e9012a6f6e35b" name="libkcapi-help" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="f14c64750090b0ae0bae768426e7023447d1adb9e9950bef6017bdd05413d32b" name="libkcapi-tests" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="7.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:Update to 1.3.1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-2" date="1643198400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable test suite in check</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-3" date="1645272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix printf usage errors highlighted by covscan</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-4" date="1651838400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete duplicate files from libkcapi-help</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-5" date="1657713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add macro to control docbook-utils-pdf dependency</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-6" date="1669291200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:simplified control macro</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.3.1-7" date="1682683200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:calculate hmac file after installing for binary</changelog>
</package>
<package pkgid="7eaf5832372dac556212387c61bd845a804a2ffb896330172190ca8fd4f17a80" name="libknet1" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="46e54257a941066d90ee695904735aa4c5f10ca04e9c8f4c11f45c0f221f7333" name="libknet1-compress-bzip2-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="e1f525e8632cca54713dcd77c670d88341fffb50daab459a75540ec9f856688e" name="libknet1-compress-lz4-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="883b692a203ceed4a02504eac0c110caad1885d0ca45c8c8fc9433c76aa75273" name="libknet1-compress-lzma-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="36f92abc00834427a39517d413681436f53359d3bc56ff62dcbe92f8705423cd" name="libknet1-compress-lzo2-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="dbd6ffd8094eef75ff11dd160019b29d9f17ec87d5d532768ea644110af32f78" name="libknet1-compress-plugins-all" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="49f371e50fc397cd37d257c4b05215f5bd6442ff2a84b609778fc42cdae153d5" name="libknet1-compress-zlib-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="c5e1436f0c1d136ffefa43aad6a39f7ecde5e9d2c5514044cf99f56955a44972" name="libknet1-compress-zstd-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="fc1a22e4de05dcc7e367c7f5db51f9ed63b0b309fda97a918f2dc86ed57e2c7b" name="libknet1-crypto-nss-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="1125758db508ce8df2b4056a2614375b49e5b528fee96af20edec4f1c1d5dcdb" name="libknet1-crypto-openssl-plugin" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="52e985fcfd9653badfffabb1807d1c686c84d09a203a17aed291c6699acf722b" name="libknet1-crypto-plugins-all" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="f9212f9d40140ade1e84d6273c4eb22d1738733b7ba75dc90c1846633a34784d" name="libknet1-devel" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="a44e88390d714da86f23273956291d3d30a20924794377f48a62ad23253ffe76" name="libknet1-plugins-all" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="817812493da70b1b9b26bce057beafa60591e9d4fe5e85b3fb41ce19d03b649d" name="libksba" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="0fa015e15c104f514b826189201addc50b38ac37e7c121dffb14cdf25dd35e2a" name="libksba-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="2f49f30409ff27ba8f7a73dce10398ae8ffb830056a187f173f2cb39fdf978c7" name="libksba-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="a1b0c031f214cc65273b2c776ef7d56fd018ef9a8b48cf57abff9321e7ebeedf" name="libksba-devel" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="ff6ec22a39f4c8e083590efd8b9b56e6d245d4e896701845463e403688156052" name="libksba-help" arch="noarch">
  <version epoch="0" ver="1.6.0" rel="3.oe2203sp1"/>
  <changelog author="lirui &lt;lirui130@huawei.com&gt; - 1.5.0-1" date="1611230400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.5.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-1" date="1638273600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update version to 1.6.0</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-2" date="1666180800">- Type:cve
- ID:CVE-2022-3515
- SUG:NA
- DESC:fix CVE-2022-3515</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.0-3" date="1671710400">- Type:cve
- ID:CVE-2022-47629
- SUG:NA
- DESC:fix CVE-2022-47629</changelog>
</package>
<package pkgid="156b54c0a0e1ce815c6d1eaecdf6c7ee295818316518b7ff7313b3a4931daf36" name="libldb" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="e4b0147424c4d31499ef692cc5c724b824c671b189ced6f4dff9ed3a51dc4201" name="libldb-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="5fb54aef6e2662b8f0110d9e2f576cd2bf94b4bcf45db6c9baa2525453275fdf" name="libldb-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="aa04a66300bbae6a43de4b893893c2e2c06dfdeda4f96ac9fd9f0e1d3a6fb6a9" name="libldb-devel" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="0ab7eff0fd7ecab46f2dec8dcdf613695774f68295d20962ed1ac635e78b37db" name="libldb-help" arch="noarch">
  <version epoch="0" ver="2.6.1" rel="2.oe2203sp1"/>
  <changelog author="lijingyuan &lt;lijingyuan3@huawei.com&gt; - 2.1.4-3" date="1626696000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:cancel gdb in buildrequires</changelog>
  <changelog author="gaihuiying &lt;gaihuiying1@huawei.com&gt; - 2.1.4-4" date="1631016000">- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove rpath of libldb's binary files</changelog>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 2.4.1-1" date="1639569600">- Type:update
- ID:NA
- SUG:NA
- DESC:update to 2.4.1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.1-2" date="1659355200">- Type:CVE
- ID:CVE-2022-32746
- SUG:NA
- DESC:fix CVE-2022-32746</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.1-1" date="1667563200">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update libldb version to 2.6.1</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.1-2" date="1680350400">- Type:CVE
- ID:CVE-2023-0614
- SUG:NA
- DESC:fix CVE-2023-0614</changelog>
</package>
<package pkgid="17059080bc3c3c08b4f2a78dd1006f8cc8f5be2820bad8770f0a0d0296748ca5" name="liblouis" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="31441e13ab40c6d9ebab4ccf881e28a6d15b505cad61a18269254316d5350130" name="liblouis" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="320d77cafdc093b5a0ebf18e53f0cbda98893874e10b7f580bbd56d74ff767c4" name="liblouis-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="e0c9154d8af2e0495f49f1bf6277de3b76d21a90c6cba19857a6266cdcc44d10" name="liblouis-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="9c11ad1778f7f9a44fa91f30de35becfb9aaef28542f2fe3668d157d70742bfe" name="liblouis-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="f765d67eccf4f88d37350482a42a1abdb74fb6c4f7f4694ad54a430ecce13eac" name="liblouis-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="eb8758b9ccfe14e4f5d7eda7bd4ea31dbf05186b2c43d666bca0173dff3e0659" name="liblouis-devel" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="eeb00a17a78bbc476dd628439bc432b77b573290fd8e1d613b6e0db254cb2f86" name="liblouis-devel" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="08ec7f5468362c2318c5ad845552fda25ca29244253d65ac79eb16264a9ac755" name="liblouis-help" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="c3fd9e43c2525f701b33cd50636328b2219fe22f19065da1c76715baf1de198c" name="liblouis-help" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="76d528ec9101c3734f3f35c0edbaf7f3d0c20f7bdab9c792d07c428a636913d3" name="liblouis-utils" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="5.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
</package>
<package pkgid="856b350c57033ee674e41eac3cb44fb34b7795fe6ead886feb48ece816260fc3" name="liblouis-utils" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="6.oe2203sp1"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.7.0-5" date="1679486400">- Fix CVE-2023-26769</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.0-6" date="1702296000">- Fix CVE-2022-26981,CVE-2022-31783,CVE-2023-26767,CVE-2023-26768</changelog>
</package>
<package pkgid="e2b4327512aa98d906c0087f0c9341cacd8e2dbe2b71641e925bd28d2f05c9db" name="liblsan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="d30d0580d4b2b7b673f0aabaf3108f17d4d31be03c0d089cc36102faf1507062" name="liblsan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="6c0de31aeb8bc51ac704b6b0d33f5c23ca412ffc6a2f331e9d7e764bcd287639" name="liblsan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="d546d1c34e05f19df1f7ad62d3c3d89d1c464c2327865ae5554946d788b3c3c4" name="liblsan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="2320ae67a7406add7bfc89626b79cce75220ac40de8d19145d44a6eef018a9f0" name="liblsan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="023ff4c16cba2bae24371dba2985a0fbc2c2a6647c344272e0e5f331e6c5dfca" name="liblsan" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="1a56fbeea2380e3ead3f178d88728531f1ded2661a5c015e90542de130dea9f5" name="liblsan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="8e087f88155940cad9ef3e423306efb6dba950f3ebb221a788ab54d6590dbe38" name="liblsan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="4fefc4ba85c53f68c7422155e0632f3cd161ded2acf239b16b03e9c50c1c19c0" name="liblsan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="d054d6e8184b746bfb7d4923697a5fe06e5d66b165567b8a4346820846325947" name="liblsan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="20b791a978d87697ec9f5e08872f47ef304237c1ac1ebc034e5d3a51626146c5" name="liblsan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="5106cbdf477b033fd3a33149c05d081f95fe72fb65c2c7a7c72e75ff11f08408" name="liblsan-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="ff1626faec122b885db5d8e7aa3cfdb03f1d8cb736436ba74aed7024f96c66c3" name="libmediaart" arch="aarch64">
  <version epoch="0" ver="1.9.6" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.9.6-2" date="1727179200">- Added 'Buildarch: noarch' to the help subpackage.</changelog>
</package>
<package pkgid="0d5dbcd14882c2608584ca9519687336498fb5f5dafe62da9d23d432381f1f6e" name="libmediaart-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.9.6" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.9.6-2" date="1727179200">- Added 'Buildarch: noarch' to the help subpackage.</changelog>
</package>
<package pkgid="04a53e775d6e43bb0e24da089a082e133b709de6aafe3b8a94a2de9343af8bf8" name="libmediaart-debugsource" arch="aarch64">
  <version epoch="0" ver="1.9.6" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.9.6-2" date="1727179200">- Added 'Buildarch: noarch' to the help subpackage.</changelog>
</package>
<package pkgid="a19f054ed8e5f9c4b8781baf690aeda25055dbb54c65d625557dafb99112af9b" name="libmediaart-devel" arch="aarch64">
  <version epoch="0" ver="1.9.6" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.9.6-2" date="1727179200">- Added 'Buildarch: noarch' to the help subpackage.</changelog>
</package>
<package pkgid="d3d6a2d658e1d5ac604bca47f3ee8c53bcdd1e55365a8c444c2f69a6391bc952" name="libmediaart-help" arch="noarch">
  <version epoch="0" ver="1.9.6" rel="2.oe2203sp1"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.9.6-2" date="1727179200">- Added 'Buildarch: noarch' to the help subpackage.</changelog>
</package>
<package pkgid="faafaba620b9d0d513c02461d36a422f77a653fd39a33d39a4d199515bdeaaf9" name="libmicrohttpd" arch="aarch64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="56885b327c1b882ce7035de6ca5ca3fa764c755f9d14215a2c1cc8df7e8f621d" name="libmicrohttpd-debuginfo" arch="aarch64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="f5ed065e8d10fe1de334736eac335861d84de1b7394940c647d576400c6fd9dc" name="libmicrohttpd-debugsource" arch="aarch64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="965954ec5f4ac7b28a7c091ff82366f22028926420b63631ec3c859c3d1e427f" name="libmicrohttpd-devel" arch="aarch64">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="70552b7472457faa02325f97158b34f099f264d3baba28f046b8cd7928dbbe06" name="libmicrohttpd-help" arch="noarch">
  <version epoch="1" ver="0.9.75" rel="4.oe2203sp1"/>
  <changelog author="caodongxia&lt;caodongxia@huawei.com&gt; - 0.9.59-5" date="1628164800">- Fix libmicrohttpd-tutorial info</changelog>
  <changelog author="xigaoxinyan&lt;xigaoxinyan@huawei.com&gt; - 0.9.75-1" date="1642161600">- update to 0.9.75</changelog>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 1:0.9.75-2" date="1659700800">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 1:0.9.75-3" date="1661601600">- Fixed missing websocket.inc in dist files</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:0.9.75-4" date="1678708800">- Fix CVE-2023-27371</changelog>
</package>
<package pkgid="bb025eb2413fd118e3e2d18168d2bc5c405cd9c100b432cf08b803919f95d4c9" name="libmilter" arch="aarch64">
  <version epoch="0" ver="8.17.1" rel="8.oe2203sp1"/>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 8.17.1-5" date="1665576000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix newaliases command error and postfix service start execption after sendmail install</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-6" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix sendmail.pem unsafe</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-7" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: modify certificate validity period</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-8" date="1716379200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix config changes</changelog>
</package>
<package pkgid="cfb9df0b50ce51c2024b9aff415edb15296a20e313c473042b568cdad188f304" name="libmilter-devel" arch="aarch64">
  <version epoch="0" ver="8.17.1" rel="8.oe2203sp1"/>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 8.17.1-5" date="1665576000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix newaliases command error and postfix service start execption after sendmail install</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-6" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix sendmail.pem unsafe</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-7" date="1678449600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: modify certificate validity period</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 8.17.1-8" date="1716379200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix config changes</changelog>
</package>
<package pkgid="69b825bb1d732a164565116c58925abaaa6896d6331f2adaed2f51f92ba95a86" name="libmount" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="28.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-19" date="1685966400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
       backport-write-correctly-handle-wide-characters.patch
       backport-wall-convert-homebrew-buffering-to-open_memstream.patch
       backport-wall-use-fputs_careful.patch
       backport-hexdump-parse-handle-truncated-format-pattern.patch
       backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
       backport-lscpu-fix-p-output-all-caches-delimiter.patch
       backport-add-return-in-supam_conv-function.patch
       backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
       backport-sulogin-ignore-none-existing-console-devices.patch
       backport-sulogin-fix-KDGKBMODE-ifdef.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-20" date="1686830400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
       backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-21" date="1691064000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-libblkid-jfs-avoid-undefined-shift.patch
       backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
       backport-logger-initialize-socket-credentials-contol-union.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-22" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-column-fix-buffer-overflow-when-l-specified.patch
       backport-column-fix-greedy-mode-on-l.patch
       backport-column-fix-memory-leak.patch
       backport-column-fix-l.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-23" date="1702555200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
       backport-login-use-correct-terminal-fd-during-setup.patch
       backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
       backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
       backport-more-avoid-out-of-bound-access.patch
       backport-lslogins-fix-realloc-loop-allocation-size.patch
       backport-ldattach-don-t-call-exit-from-signal-handler.patch
       backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
       backport-blkid-fix-call-to-err_exclusive_options.patch
       backport-libblkid-reset-errno-before-calling-probefuncs.patch
       backport-lib-path-fix-possible-out-of-boundary-access.patch
       backport-libmount-improve-mnt_table_next_child_fs.patch
       backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
</package>
<package pkgid="a1be4e224c4c133494ddef56db4b835a1c06c384a6b3ab8757e4c675d32af380" name="libmount" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="33.oe2203sp1"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-24" date="1705406400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
	backport-libsmartcols-flush-correct-stream.patch
	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
	backport-cal-avoid-out-of-bound-write.patch
	backport-libfdisk-sun-properly-initialize-partition-data.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-25" date="1708344000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:solve the issue of ext4 is incorrectly probed as drbd
        [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
        backport-libblkid-probe-read-data-in-chunks.patch
        backport-libblkid-avoid-aligning-out-of-probing-area.patch
        backport-libblkid-drbd-validate-zero-padding.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-26" date="1709899200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
       backport-libblkid-hfsplus-reduce-false-positive.patch
       backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
       backport-libblkid-drbd-reduce-false-positive.patch
       backport-lib-cpuset-exit-early-from-cpulist_parse.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-27" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
       backport-libblkid-Check-offset-in-LUKS2-header.patch
       backport-more-fix-poll-use.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-28085
- SUG:NA
- DESC:fix CVE-2024-28085</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-29" date="1713787200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add provides and support enable-raw
       The current version of the kernel also supports the raw driver.
       To keep consistent with the previous version, roll back the modification.</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-30" date="1714305600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix lscpu core dump
       backport-lscpu-don-t-use-NULL-sharedmap.patch
       backport-lscpu-use-topology-maps-in-more-robust-way.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-31" date="1715083200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-hexdump-check-blocksize-when-display-data.patch
       backport-lslocks-fix-buffer-overflow.patch
       backport-last-avoid-out-of-bounds-array-access.patch
       backport-lsipc-fix-semaphore-USED-counter.patch</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.37.2-32" date="1717761600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-uuidd-fix-open-lock-state-issue.patch</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.37.2-33" date="1718712000">- Type:update
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
</package>
<package pkgid="2e510f7844f95df3ba3422508fa2c8a663b0ff89db096890aed7efc5fcdd62bd" name="libmozjs-91-0" arch="aarch64">
  <version epoch="0" ver="91.6.0" rel="4.oe2203sp1"/>
  <changelog author="liyanan &lt;liyanan32@huawei.com&gt; - 91.6.0-2" date="1648123200">- remove .oe2203sp1</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
</package>
<package pkgid="f61d780533f05caef34e213a53d5ca52815864c906a11b7e21dc66aea546a383" name="libmozjs-91-0" arch="aarch64">
  <version epoch="0" ver="91.6.0" rel="5.oe2203sp1"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 91.6.0-3" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-4" date="1711022400">- fix CVEs</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 91.6.0-5" date="1717675200">- fix CVEs</changelog>
</package>
<package pkgid="c6a0abb605b94637f3432ce78cd378f55235a94c3a888661ed05cc8484e7b7bf" name="libndp" arch="aarch64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="b8f0c694508c2401e5ff226274137338d1824b7e182edd58359bed542ababd63" name="libndp-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="250f1f87e0d06dc6fc52b56d80a8835f020d7cd9f2b5919ce020eb9b2fe9e654" name="libndp-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="a4ca2d60691871077fd743f828c8b7453f940e1bcc451a96f541f6b3dee2676c" name="libndp-devel" arch="aarch64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="c4d68c158f1b37c6e9dbc8c296c9bb041cb1018e9f0ac56a0f3e2f700a064b6e" name="libndp-help" arch="aarch64">
  <version epoch="0" ver="1.8" rel="3.oe2203sp1"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.8-2" date="1666353600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for local rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.8-3" date="1718107200">- Type:CVE
- ID:CVE-2024-5564
- SUG:NA
- DESC:fix CVE-2024-5564</changelog>
</package>
<package pkgid="868806f68f0f59e478fcc1812f850692a73e840badb927e99479b270804126b9" name="libnet" arch="aarch64">
  <version epoch="0" ver="1.2" rel="3.oe2203sp1"/>
  <changelog author="liukuo &lt;liukuo@kylinos.cn&gt; - 1.2-2" date="1659700800">- License compliance rectification</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2-3" date="1717588800">- delete redundant files</changelog>
</package>
<package pkgid="b0b028af31046f023044d61bad8f3cbbeaa1d2569106e72b1bf93f9bae73e247" name="libnet-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2" rel="3.oe2203sp1"/>
  <changelog author="liukuo &lt;liukuo@kylinos.cn&gt; - 1.2-2" date="1659700800">- License compliance rectification</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2-3" date="1717588800">- delete redundant files</changelog>
</package>
<package pkgid="3f3b806d04da1b0a9985dae790bb25d2d0069dcf85d1847a84fe636df46ed933" name="libnet-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2" rel="3.oe2203sp1"/>
  <changelog author="liukuo &lt;liukuo@kylinos.cn&gt; - 1.2-2" date="1659700800">- License compliance rectification</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2-3" date="1717588800">- delete redundant files</changelog>
</package>
<package pkgid="b6f087f189495fa907db55e52fbd3fe71a8472586ad6eee3e5d9402093123a16" name="libnet-devel" arch="aarch64">
  <version epoch="0" ver="1.2" rel="3.oe2203sp1"/>
  <changelog author="liukuo &lt;liukuo@kylinos.cn&gt; - 1.2-2" date="1659700800">- License compliance rectification</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2-3" date="1717588800">- delete redundant files</changelog>
</package>
<package pkgid="b562be989cc814e1daf95ab5f80a9b54a92ae1d63c998f4d0f66f2656d2303ab" name="libnet-help" arch="aarch64">
  <version epoch="0" ver="1.2" rel="3.oe2203sp1"/>
  <changelog author="liukuo &lt;liukuo@kylinos.cn&gt; - 1.2-2" date="1659700800">- License compliance rectification</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.2-3" date="1717588800">- delete redundant files</changelog>
</package>
<package pkgid="bc51ebc9b923dbd5b86618d77ebed1479373bbb7514a2c0ef1dbf3bf5b6777c6" name="libnetfilter_conntrack" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="397ce57964cc76d868ebaaa53819202bae25ba46115368e368584272999404c5" name="libnetfilter_conntrack-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="79b4fe552652c64e108be6d8c345bd4fba19023b1a7f801417e90cb9d8c23b21" name="libnetfilter_conntrack-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="89784b674095abaa6cedeec31e1d6dce0a5ebdc7f456894015ca0d4d0ac5f802" name="libnetfilter_conntrack-devel" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.0.8-3" date="1663070400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.0.8-4" date="1663675200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove filter tests</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-5" date="1669636800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add make as BuildRequires for rpmbuild</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.0.8-6" date="1698408000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync uapi header with nf next</changelog>
</package>
<package pkgid="b501d877aa7e9db1b9337ec4e7e65f009f2ad58056d35410962e0dd913fbae88" name="libnghttp2" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="8dd6d87caac9ac1d56498ffbec930d839c4fb0376672e1331de19b11594579b7" name="libnghttp2" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="e8a2cb98b3a552a05a92eaa96a78bc0f5c8c3dccbd867cc09a3d8ad0b8a9cf7e" name="libnghttp2" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="f5a9a20806dcbcff1a0be86928dad396c99355bfb0e02162b08104476b312fc5" name="libnghttp2" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="66f31c87251cf8b35ddc4453a3cd14f8921eae14ac2293470ea94d7c616c0a79" name="libnghttp2-devel" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="3.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
</package>
<package pkgid="747d275073dea9cf60a6c02bedc1399df9ade04823fb4ee0f639eb3f54504d22" name="libnghttp2-devel" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="4.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
</package>
<package pkgid="f1461888837c1cdeceb15cc75d420fe3e71d8f0daaac149aceef76b8ec4b2189" name="libnghttp2-devel" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="5.oe2203sp1"/>
  <changelog author="yanglu &lt;yanglu72@huawei.com&gt; - 1.46.0-1" date="1638792000">- Type:requirements
- Id:NA
- SUG:NA
- DESC:update nghttp2 to 1.46.0</changelog>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
</package>
<package pkgid="d6acd602288fd7ec9c0681a3d802e1d21048b78a018d263230527e8dc3a4a9a2" name="libnghttp2-devel" arch="aarch64">
  <version epoch="0" ver="1.46.0" rel="6.oe2203sp1"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 1.46.0-2" date="1661169600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:replace the use of strtoul and strol with parse_uint</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.46.0-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete *.a file</changelog>
  <changelog author="wangye &lt;wangye91@h-partners.com&gt; - 1.46.0-4" date="1689422400">- Type:cve
- ID:CVE-2023-35945
- SUG:NA
- DESC:fix CVE-2023-35945</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.46.0-5" date="1697716800">- Type:CVE
- ID:CVE-2023-44487
- SUG:NA
- DESC:fix CVE-2023-44487 and build error</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
</package>
<package pkgid="5152dcfa78bc60b9b18ab91ab36e07602948f7ddf2f8a2f520af5a43a7f9331f" name="libnozzle1" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="07fb16d1f6d10cbc991caf559c18f5b92e4afea69d6f418171fe07e2cc2f1fb4" name="libnozzle1-devel" arch="aarch64">
  <version epoch="0" ver="1.20" rel="4.oe2203sp1"/>
  <changelog author="Liu Yinsi &lt;liuyinsi@163.com&gt; - 1.13-3" date="1628078400">- fix format-truncation to support gcc 10</changelog>
  <changelog author="zouzhimin  &lt;zouzhimin@kylinos.cn&gt; - 1.20-1" date="1658750400">- update to 1.20-1</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-2" date="1661256000">- Remove rpath</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.20-3" date="1670587200">- Add /sbin/ldconfig to post and postun</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.20-4" date="1673870400">- Add link file for synamic library with "lib" prefix</changelog>
</package>
<package pkgid="36c3407d8380027c829f3b14eb452983440d565e59ad87f9c59a6feda79f9da4" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="110.oe2203sp1"/>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-101" date="1669723200">- elf: Fix alloca size in _dl_debug_vdprintf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-102" date="1670500800">- elf: Do not completely clear reused namespace in dlmopen (bug 29600)
- elf: Remove allocate use on _dl_debug_printf
- elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
- Fix OOB read in stdlib thousand grouping parsing [BZ#29727]</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
</package>
<package pkgid="6aa7a04f5b4eae5de5ee44a6f65890e80569847091f821b352c4d449333e89f6" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="112.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-103" date="1670846400">- io: Fix use after free in ftw (BZ 26779)</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-104" date="1671192000">- x86: Fix wcsnlen-avx2 page cross length comparison(BZ #29591)</changelog>
  <changelog author="wanghongliang &lt;wanghongliang@loongson.cn&gt; - 2.34-105" date="1671624000">- LoongArch Port
- Add login-Add-back-libutil-as-an-empty-library.patch from upstream
  to fix libutil build error.
- Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
  to fix memory bug
- After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
- Left some test fails in testsuite_whitelist.</changelog>
  <changelog author="Xue Liu &lt;liuxue@loongson.cn&gt; - 2.34-106" date="1674993600">- LoongArch: Optimize some string functions including memcpy, memmove,
  memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-107" date="1675166400">- Fixup testsuite_whitelist for LoongArch.</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-108" date="1675339200">- Fixup asin and acos errors for LoongArch.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-109" date="1675684800">- Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
  versions, this symbol is required to keep the previous items compatible.</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-110" date="1675857600">- fix error patch number</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-111" date="1677153600">- gmon: Fix allocated buffer overflow (bug 29444)</changelog>
  <changelog author="Lv Ying &lt;lvying6@huawei.com&gt; - 2.34-112" date="1677326400">- elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
  - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
    specified segment, just try to use hugepage to mmap specified segment
    instead of all the segments in the shared object
  - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage</changelog>
</package>
<package pkgid="c64d0a81752411a6005ce7b40456a6e5449f288408a31fa3fc3ae60094c64a91" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="136.oe2203sp1"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-127" date="1689508800">- time: Fix use-after-free in getdate</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
</package>
<package pkgid="d625f200f19c39a57630cefe4b46efcd4c7e66c3412e5ecddd2abb374845f312" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="137.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-128" date="1690545600">- DESC: Add static PIE support for LoongArch</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-129" date="1691409600">- fix Segmentation fault in nss module
- fix nss database check reload and get memleak</changelog>
  <changelog author="liubo&lt;liubo335@huawei.com&gt; - 2.34-130" date="1691582400">- inet fix warn unused result</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-131" date="1692014400">- resolv_conf: release lock on allocation failure (bug 30527)</changelog>
  <changelog author="chenhaixiang&lt;chenhaixiang3@huawei.com&gt; - 2.34-132" date="1693310400">- time: strftime_l: Avoid an unbounded alloca.</changelog>
  <changelog author="Lv Ying&lt;lvying6@huawei.com&gt; - 2.34-133" date="1693396800">- string: strerror must not return NULL (bug 30555)</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-134" date="1695470400">- fix CVE-2023-4813</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
</package>
<package pkgid="f201befb56d91fea89f20a69ef498c34cfc12546385b24d58d9c2a34b149ff78" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="144.oe2203sp1"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-135" date="1695643200">- fix CVE-2023-4806 CVE-2023-5156</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 2.34-136" date="1695729600">- fix CVE-2023-5156</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.34-137" date="1696680000">- fix CVE-2023-4911</changelog>
  <changelog author="lijianglin &lt;lijianglin2@huawei.com&gt; - 2.34-138" date="1697457600">- io: Do not implement fstat with fstatat</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 2.34-139" date="1698321600">- posix: Fix some crashes in wordexp</changelog>
  <changelog author="doupengda &lt;doupengda@loongson.cn&gt; - 2.34-140" date="1699531200">- Modify patch 9030 defined multiple times</changelog>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
</package>
<package pkgid="94544d5d4a89592d0c90e3eba0b2e64cb9f3ea3805da9d983d49a6ebe895c9a1" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="150.oe2203sp1"/>
  <changelog author="lixing &lt;lixing@loongson.cn&gt; - 2.34-141" date="1699876800">- Fixup LoongArch Port errors</changelog>
  <changelog author="nicunshu &lt;nicunshu@huawei.com&gt; - 2.34-142" date="1701777600">- add the missing patch to the source package</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-143" date="1702555200">- elf: Handle non-directory name in search path (BZ 31035)</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-144" date="1703851200">- Fix invalid pointer dereference in wcpcpy_chk and wcscpy_chk</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-145" date="1705147200">- elf: Add a way to check if tunable is set (BZ 27069)
- malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2</changelog>
  <changelog author="Yang Yanchao &lt;yangyanchao6@huawei.com&gt; - 2.34-146" date="1713873600">- iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)</changelog>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
</package>
<package pkgid="9e5eaebdd3d712fee8f6e4c362066ade7e93f316eee0740dd82b0efd7ca3b46c" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp1"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="6144b2261e65e1ba62b82cb3b8a0a26c9f23ff39626e445466546c1e461aeccb" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp1"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="3c9adbba5298f3870fe0065f30b27723b1250cfbefbc80f7ab8360c9401b355b" name="libnsl" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp1"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="98881056e612b43fe5560f4fc30b349df31d73b1e7ae72ce98405ad4770eee77" name="libobjc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="2e3bb1311d7d864a381adfebf584ab881e649fb0b77d06a5e636a4d2d17394fb" name="libobjc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="4c2d86398e342d41eb04435e75471509c8f525fdbdd374e09d2b4d52178adf0b" name="libobjc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="7a4aa2480bfe917782c4f35536c2701d291ebd749bd3e39aa95f531042d33c10" name="libobjc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="a78881fee8a065e44cec9c1cfcce5b1d85df4e0547dce74dbfb04e0996c3ce3f" name="libobjc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="083930a98bf838d4437ca3e460c9111eeb01c04fb64e2a3fcffd11eec1e5d9ce" name="libobjc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="77e68f8bc03622274414ab167af6cfddfe987e8e570a643ea7a2fc9626d1eaa4" name="libpcap" arch="aarch64">
  <version epoch="14" ver="1.10.1" rel="4.oe2203sp1"/>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.1-4" date="1726747200">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
</package>
<package pkgid="c4d687149c6fbc9a9d9aa8deae94c97391e986489f50229108b86d12390308f4" name="libpcap-debuginfo" arch="aarch64">
  <version epoch="14" ver="1.10.1" rel="4.oe2203sp1"/>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.1-4" date="1726747200">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
</package>
<package pkgid="5f8e6017570b361df93fb8d0e50055e97e93024159309454292c117ec8cd8e60" name="libpcap-debugsource" arch="aarch64">
  <version epoch="14" ver="1.10.1" rel="4.oe2203sp1"/>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.1-4" date="1726747200">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
</package>
<package pkgid="48baf5c835862697b0aa8993ef1ab4a1c63b74de499ed5b51cca863741298838" name="libpcap-devel" arch="aarch64">
  <version epoch="14" ver="1.10.1" rel="4.oe2203sp1"/>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.1-4" date="1726747200">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
</package>
<package pkgid="0bebe12972cb83b26987b5ce81064aa3f569a05a0686ffc517bfd2f16fde5462" name="libpcap-help" arch="noarch">
  <version epoch="14" ver="1.10.1" rel="4.oe2203sp1"/>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.1-4" date="1726747200">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
</package>
<package pkgid="eec7cf8782ab44767644ac0897e75ada3ece606fa363b1fa52a2be75cf65fe80" name="libpq" arch="aarch64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="998cb85cdb16d3842fe42c6b9c93287dfbb00326e1e2954309f521efe1914c47" name="libpq-debuginfo" arch="aarch64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="b4dee64ad4dc16868cb58c04f791b76d1e83c34858e6197b32e32f0c6c94deee" name="libpq-debugsource" arch="aarch64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="0b6ee597ea78d87447c0c4f80566b84ff667a14a62a98737837524d4c896ca42" name="libpq-devel" arch="aarch64">
  <version epoch="0" ver="13.12" rel="1.oe2203sp1"/>
  <changelog author="yangweidong &lt;yangweidong9@huawei.com&gt; - 11.16-1" date="1652961600">- Upgrade libpq to 11.16, fix CVES: CVE-2021-32028 CVE-2021-3677 CVE-2021-23222</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 13.7-1" date="1655121600">- upgrade libpq to 13.7,fix CVE-2021-32027,CVE-2022-1552</changelog>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="suwei &lt;suwei@kylinsec.com.cn&gt; - 13.7-3" date="1692014400">- Fix sw_64 build error</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- Bump to 13.12 to fix CVEs</changelog>
</package>
<package pkgid="29d380da47ea732b518907ea81d108211133470b8840e4f3c89a1168d9f11048" name="libpwquality" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-3" date="1660132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix doc about difok</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1661256000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the files order in patch file fix-doc-about-difok.patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-5" date="1719921600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix maxclassrepeat=1</changelog>
</package>
<package pkgid="6ac20867ae5c16c574fb50417f78bcf4aaefcbdb367c43595f364da7e5b1bfd1" name="libpwquality-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-3" date="1660132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix doc about difok</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1661256000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the files order in patch file fix-doc-about-difok.patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-5" date="1719921600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix maxclassrepeat=1</changelog>
</package>
<package pkgid="30d30687e18d625af4a9f9f17314877088f683796dc679415a96647cdb2a0f01" name="libpwquality-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-3" date="1660132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix doc about difok</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1661256000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the files order in patch file fix-doc-about-difok.patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-5" date="1719921600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix maxclassrepeat=1</changelog>
</package>
<package pkgid="89cc8a8ebf56259ecbfef1295a5d506bfed3b36be74ffee5dc1cb4919d3984e0" name="libpwquality-devel" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-3" date="1660132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix doc about difok</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1661256000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the files order in patch file fix-doc-about-difok.patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-5" date="1719921600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix maxclassrepeat=1</changelog>
</package>
<package pkgid="8da2823eb6bbe8fe73ec97719c35951506903e0baf2e2adb3c6c438d07aea9e9" name="libpwquality-help" arch="noarch">
  <version epoch="0" ver="1.4.4" rel="5.oe2203sp1"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-3" date="1660132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix doc about difok</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1661256000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the files order in patch file fix-doc-about-difok.patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-5" date="1719921600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix maxclassrepeat=1</changelog>
</package>
<package pkgid="91587ce8b280ab84a4f5a2e23a59eba2432da8148919d62e4a3416cf2f3a0532" name="libquadmath" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="815aca143c3db6431f2fa67058c546cef2bd703dd6249c63f6de4d8b63e39def" name="libquadmath" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="d64951a0e16f212f85329114e4d43225b7284fec35dffd75db3400ed79d321df" name="libquadmath" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="a1ce471ecf0c51c3f0edd0bab417274e4458351232b2c04361e98c2bf0025aad" name="libquadmath" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="1b877944880a601f1a4ba30e5be654fff389e7afd523f25a5bbf3f7285cf38ba" name="libquadmath" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="ee7ec1d77b1ce81d3d8414a1f58e917929bb0baaf13181d05b261b1455f4a758" name="libquadmath" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="bb114532718d228e6cf4dc5286dc963cb25c1cb9b1a2e20c9e41e17dbd56e4cc" name="libquadmath-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="caf07e322c51a0986fb4f3e510a27bbb2e66b48985695bd2978aa65315270906" name="libquadmath-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="7934fc66d32466b129931c7b4235b0d4acfa0fb0a7975d2880614551bf162a8f" name="libquadmath-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
</package>
<package pkgid="fdd910352c16a17385c61034e4b2efaf80b1f2ea10badb7e3c6d52c99c9359f7" name="libquadmath-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="24.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
</package>
<package pkgid="1be7792a4c917da14023a69061c449210c41b7ce36a50bd17824fa9517960538" name="libquadmath-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="25.oe2203sp1"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
</package>
<package pkgid="ca00dd1b6fb2158e01cdb9692a12fa1f8b8f40d3c3028f18173c17d6bcc2c1e1" name="libquadmath-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="28.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
  <changelog author="Zhao Shujian &lt;zhaoshujian@huawei.com&gt; - 10.3.1-23" date="1686139200">- Type:Spec
- ID:NA
- SUG:NA
- DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.</changelog>
  <changelog author="Wang Ding &lt;wangding16@huawei.com&gt; - 10.3.1-24" date="1686657600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from src-openeuler/openEuler-22.03-LTS-SP2</changelog>
  <changelog author="Zhao Zhenyu &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-25" date="1695384000">- Type:CVE
- ID:NA
- SUG:NA
- DESC: To fix CVE-2023-4039</changelog>
  <changelog author="jiangchangang &lt;jiangchuangang@huawei.com&gt; - 10.3.1-26" date="1700136000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix glibc test coredump</changelog>
  <changelog author="Zheng Chenhui &lt;zhengchenhui1@huawei.com&gt; - 10.3.1-27" date="1706788800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 10.3.1-28" date="1713182400">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:disable isl</changelog>
</package>
<package pkgid="fdc68520d5d5af1d07b14c72733b25eca09b614abe8e369e41b573d8b616ffb8" name="libquadmath-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="20.oe2203sp1"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-11" date="1651838400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="zhaomengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 10.3.1-12" date="1657281600">- Type:SPEC
- ID:NA
- SUG:NA
- DESC:Enable libgccjit</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
</package>
<package pkgid="d56efce90044218b897dd030b5375878cc988ae7f0dc86696bafd71ea7672e35" name="libquadmath-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="22.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-13" date="1659960000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-16" date="1663329600">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-17" date="1669896000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-18" date="1670500800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc, fix wrong date</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-19" date="1671451200">- Type:Fix
- ID:NA
- SUG:NA
- DESC:Delete rpath in liblsan,libasan,libubsan,libtsan</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-20" date="1671796800">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Bugfix for loop-distribution, semi-relayout and mull64.</changelog>
  <changelog author="huangxiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 10.3.1-21" date="1679227200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:enable isl and add --with-isl</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; - 10.3.1-22" date="1682251200">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc
       Fix typo in tree-ssa-reassoc.c.</changelog>
</package>
<package pkgid="2755f4c17736304babd7012bec74b095cff576cf9c29a49ee0dc05daa9d76c5a" name="libquadmath-static" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="23.oe2203sp1"/>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-14" date="1660651200">- Type:Revert
- ID:NA
- SUG:NA
- DESC:Remove 2 unnecessary patches</changelog>
  <changelog author="benniaobufeijiushiji &lt;linda7@huawei.com&gt; - 10.3.1-15" date="1662638400">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc</changelog>
  <changel
[file cut: first 33554432 bytes kept]
[document cut: first 32157630 of 33550796 characters kept]
